Integration with Keycloak

[amalkurup89]

Is Apicurio registry integrated with Keycloak

[jsenko]

Yes, but it's disabled by default, see https://github.com/Apicurio/apicurio-registry/blob/master/app/src/main/resources/application.properties#L105
Could you provide more details about your issue?
CC @carlesarnal

[amalkurup89]

@jsenko Just like apicurio studio, I need a login functionality in Apicurio registry and logged in user should be entitled to view artifacts uploaded or shared with him, on registry UI

[carlesarnal]

hi @amalkurup89, you'll need to provide your own Keycloak server with a Realm properly configured with users matching the roles defined in the application.properties that Jakub shared with you. Let me know if you need help.

[amalkurup89]

@jsenko @carlesarnal I have setup the below environment variables, but still UI authentication is not enabled

• name: AUTH_ENABLED
  value: 'true'
• name: KEYCLOAK_URL
  value: 'keycloakurl/auth'
• name: KEYCLOAK_REALM
  value: realmname
• name: KEYCLOAK_API_CLIENT_ID
  value: clientid
• name: KEYCLOAK_UI_CLIENT_ID
  value: clientid

[carlesarnal]

Hi @amalkurup89, here's a realm for you to import into Keycloak.

The appropriate values for that realm are:

• name: AUTH_ENABLED
  value: 'true'
• name: KEYCLOAK_URL
  value: {KEYCLOAK_SERVER_URL}/auth
• name: KEYCLOAK_REALM
  value: registry
• name: KEYCLOAK_API_CLIENT_ID
  value: registry-api
• name: KEYCLOAK_UI_CLIENT_ID
  value: registry-ui

Let me know if you need anything else.

[EricWittmann]

@amalkurup89 What version of Apicurio Registry are you using? Authentication via KC is new to version 2.0.x, which is just in the process of being released this month.

You would need to use e.g. 2.0.0.RC1 for this to work.

[tillias]

Is there any ticket to subscribe to or is it part of "Apicurio Registry 2.0.x" version? We would be also very interested in this feature

[EricWittmann]

Auth via Keycloak is part of the 2.0.x release.

[carlesarnal]

Closing this, if anyone has any objections, please reopen.

[arthurguau]

Docker-compose and Quarkus based installation

It says "This setup contains a fully configured Apicurio Registry package already integrated with Keycloak. ", but I still can not get it keycload enabled after strictly followed steps specified in Docker-compose and Quarkus based installation. Not sure if I have missed some steps?

[carlesarnal]

Hi @arthurguau, could you please raise a new issue since yours is not strictly related to this one? Also please include any stacktrace and anything you think may be relevant, thanks!.