keycloak使用

￡神魔★判官ぃ 2023-02-11 08:55 6阅读 0赞

1.安装配置

下载地址：

[https://www.keycloak.org/][https_www.keycloak.org]

启动：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70][]

Keycloak 的本地访问地址为：http://localhost:8080/auth/，访问该地址，点击页面中的“Administration Console“，创建 Keycloak 的管理员账户，该账户用于在 Keycloak 中进行配置，管理用户、角色等。

2.配置mysql数据库

1.下载JDBC驱动，可从官网或maven仓库直接下载，不再赘述。   
2.将驱动打包放入Keycloak的classpath中   
2.1在路径keycloak\\modules\\system\\layers\\base。。。。下新建目录com\\mysql\\main，并将下载的Jar放入此目录。目录名称可随意修改，不过官方推荐使用包路径作为目录。例如：D:\\soft\\keycloak-9.0.3\\modules\\system\\layers\\base\\com\\mysql\\main

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 1][]

jar同级目录下新建文件module.xml，文件内容如下:   
<?xml version="1.0" encoding="UTF-8"?>  
<module xmlns="urn:jboss:module:1.3" name="com.mysql">  
    <resources>  
        <resource-root path="mysql-connector-java-8.0.13.jar"/>  
    </resources>  
    <dependencies>  
        <module name="javax.api"/>  
        <module name="javax.transaction.api"/>  
    </dependencies>  
</module>

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 2][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 3][]

<datasources>  
                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="$\{wildfly.datasources.statistics-enabled:$\{wildfly.statistics-enabled:false\}\}">  
                    <connection-url>jdbc:h2:mem:test;DB\_CLOSE\_DELAY=-1;DB\_CLOSE\_ON\_EXIT=FALSE</connection-url>  
                    <driver>h2</driver>  
                    <security>  
                        <user-name>sa</user-name>  
                        <password>sa</password>  
                    <security>  
                </datasource>  
                <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" statistics-enabled="$\{wildfly.datasources.statistics-enabled:$\{wildfly.statistics-enabled:false\}\}">  
                      
<connection-url>jdbc:mysql://192.168.43.105/keycloak?useSSL=false&serverTimezone=GMT%2B8&characterEncoding=UTF-8</connection-url>  
<driver>mysql</driver>  
<security>  
<user-name>root</user-name>  
<password>root</password>  
<curity>  
                </datasource>  
                <drivers>  
                    <driver name="h2" module="com.h2database.h2">  
                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>  
                    </driver>  
<driver name="mysql" module="com.mysql">  
<xa-datasource-class>com.mysql.cj.jdbc.MysqlXADataSource</xa-datasource-class>  
</driver>  
                </drivers>  
            </datasources>

启动后生成数据库的表如下：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 4][]

keycloak单点配置及样例：

链接：https://pan.baidu.com/s/188xvNKy\_YGS0oC9KIZYdhQ   
提取码：c2dy

注意此处的role对应的keycloak中client中的role:   ROLE\_user

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 5][]

[https_www.keycloak.org]: https://www.keycloak.org/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200522174003692.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200522180856345.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200522180019848.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200522180041957.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200522181000709.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200522181959703.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxODQzMDc=,size_16,color_FFFFFF,t_70