Repository navigation
Replies: 1 comment
|
Anyone able to answer this question? |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hi.
My frontend application (Angular) is secured with keycloak (angular-keycloak). The back-end application (spring boot) is also secured with a keycloak (keycloak-spring-boot-starter).
There are many users in the application who have different roles and groups. Roles and groups are stored in the token.
There was a need to embed my app in another web app using the iframe tag
The login keycloak page must never show up, but the app still needs to be secured with keycloak. Is there a way to achieve this?
I was thinking of creating a third client in keycloak for example (web-embeded) that will generate a token that will never expire and pass it to the application as follows:
What do you think about it?
How to approach this problem?
What are the possible solutions?
Please help. Thanks!
All reactions