KEYCLOAK-591 Require SSL for all external requests by default

This commit is contained in:
Stian Thorgersen committed 2014-08-01 13:52:04 +01:00
1 parent 47c9f1439d
commit 6cbeeb1b1a
100 files changed
+415 -255

No files matched your search

@@ -1,6 +1,7 @@
package org.keycloak.example;
import org.keycloak.adapters.AdapterDeploymentContext;
import org.keycloak.enums.SslRequired;
import org.keycloak.representations.adapters.config.AdapterConfig;
import javax.servlet.ServletContextEvent;
@@ -18,7 +19,7 @@ public class BootstrapListener implements ServletContextListener {
config.setRealm("aerogear");
config.setResource("unified-push-server");
config.setAuthServerUrl("/auth");
config.setSslNotRequired(true);
config.setSslRequired(SslRequired.EXTERNAL.name());
config.setPublicClient(true);
config.setDisableTrustManager(true);
deploymentContext.updateDeployment(config);
@@ -4,7 +4,7 @@
"accessTokenLifespan": 3000,
"accessCodeLifespan": 10,
"accessCodeLifespanUserAction": 6000,
"sslNotRequired": true,
"sslRequired": "external",
"registrationAllowed": false,
"social": false,
"adminTheme": "aerogear",