Repository navigation
Is it possible to intercept CIBA requests? #39004
Unanswered
seeking-advice
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hi all. I'm fairly new to Keycloak so apologies for my naivety.
Is it possible to add a filter / intercept CIBA endpoint requests in standalone Keycloak?
I have a requirement to perform custom functionality before CIBA responses are returned to the client. Specifically during the Backchannel Authentication endpoint (
/openid-connect/ext/ciba/auth) and the Token endpoint (/openid-connect/token). Basically I need to make a custom REST call before each endpoint returns a response and I need to programmatically add claims to the access token JWT.I am running Keycloak as a standalone application but am also open to embedding it within a Spring Boot app (though I have read that this embedded mode is no longer recommended).
Would you be able to advise on suitable methods of intercepting the requests?
I have tried to create custom SPIs for this purpose (implementing the
Authenticatorinterface) however there doesn't seem to be a CIBA Authentication Flow to bind to in the UI. For example, I am able to implementing custom functionality to the Authorization Code Flow by binding to browser flow but am unsure of the best way to do this for CIBA.All reactions