Clojurians Log v2

There's library named `keycloak-clojure` to wrap the Keycloak Java Adapter https://github.com/jgrodziski/keycloak-clojure

How much feasible is setting up Keycloak for a single developer? vs using sessions and PostgreSQL tables for user's email/username, roles, hashed password and permissions? Using Buddy and Permissions (https://github.com/tuhlmann/permissions) for this purpose. I'm asking from the perspective of operational cost, complexity, barriers versus benefit.

@ackerleytng

I've not used keycloak with clojure before, but i've used it with a python webapp

i liked not having to worry about sessions, and getting to offload a lot of the security stuff to gatekeeper

How did you setup keycloak? is it feasible to do it on same machine on DO droplet on which app installed (with postgresql for app data)?

actually the nice part is more gatekeeper than keycloak! not sure if AWS has a similar setup, but the idea behind gatekeeper is that it takes client traffic like a reverse proxy, and only forwards it upstream if it passes validation

i set it up on another VM

if you set it up on the same machine, you'll have to deal with routing the client requests between keycloak and your app

the client will need to be redirected to keycloak, that's the way OAuth works

so request would go like nginx -> keycloak -> keycloak gatekeeper -> clojure app

nope, it'll be something like

nginx -> keycloak
  |
  V
gatekeeper -> clojure app

happen to be working on this recently: https://github.com/ackerleytng/keycloak-quickstarts/tree/latest/app-authz-uma-photoz#scripted-quickstart

this isn't the python app, it's a quickstart that keycloak provided

i modified it to work in docker and added further instructions to make it a quicker quickstart

I used caddy to route between keycloak and the java app (this one doesn't use gatekeeper)

not sure if this is such a good idea for a production service though