thomasdarimont / kc-dnc-demo

PoC for securing AspNetCore based Web Apps with Keycloak.

PoC for ASP.Net Core Keycloak Integration

Simple example for securing an AspNetCore Web App with Keycloak.

The example consists of two modules:

• WebApi - A simple stateless REST Web-Service that is secured with JWT authentication.
• WebApp - A simple Web App that is secured via Keycloak.

The WebApp module demonstrates a basic integration with Keycloak by leveraging the built-in OpenID Connect support in AspNetCore which is additionally augmented with Keycloak specific configuration, like client role extraction. Further more, the WebApp calls the WebApi with an Access-Token provided after a successful authentication, to demonstrate calls to backend services.

The following features are currently supported:

• Single-Sign in with Keycloak
• Logout with Keycloak
• Access client specific role information (resource_access claim)
• Automatic Access-Token refresh in background
• Extract Access-Token to call backend-services.

Building

Note you need .Net Core 2.2, which you can get here: .Net Core 2.2 Download

dotnet restore

dotnet build

Setup https for dotnet core

TODO

Running

Start Keycloak with the dnc-demo Realm

docker run \
  -d \
  --name keycloak-dnc \
  -e KEYCLOAK_USER=admin \
  -e KEYCLOAK_PASSWORD=admin \
  --net=host \
  -p 8080:8080 \
  -v `pwd`/dnc-demo-realm.json:/config/dnc-demo-realm.json \
  -it jboss/keycloak:5.0.0 \
  -b 0.0.0.0 \
  -Djboss.http.port=8080 \
  -Dkeycloak.migration.action=import \
  -Dkeycloak.migration.provider=singleFile \
  -Dkeycloak.migration.file=/config/dnc-demo-realm.json \
  -Dkeycloak.migration.strategy=OVERWRITE_EXISTING

Start the WebApp

//TODO

Start the WebAPI

//TODO

Login via https://localhost:5001

• Login as user with tester:test
• Login as admin with arno:test

Third-Party Components

The example uses the following third-party components:

• Automatic Token Management Automatically renews the Access-Token in the background of the WebApp module.