Keycloak.x custom (federation) provider use datasource in keycloak.conf quarkus.properties #11464

simin-c · 2022-04-19T09:04:08Z

simin-c
Apr 19, 2022

Hi all,

I have a provider that should be migrated from JBOSS distribution to Quarkus distribution.

In the JBOSS distribution I was leveraging the JNDI datasource, while this is becoming vague in the quarkus distribution.

In quarkus.properties I have

`
quarkus.datasource.db-kind=oracle
quarkus.datasource.jdbc.url=VALIDURL
quarkus.datasource.username=VALIDUSERNAME
quarkus.datasource.password=VALIDPASSWORD
quarkus.datasource.jdbc.max-size=13

`

In build.gradle I have

`

// https://mvnrepository.com/artifact/javax.inject/javax.inject
implementation group: 'javax.inject', name: 'javax.inject', version: '1'

// https://mvnrepository.com/artifact/io.agroal/agroal-api
implementation group: 'io.agroal', name: 'agroal-api', version: '1.16'

// https://mvnrepository.com/artifact/io.agroal/agroal-pool
implementation group: 'io.agroal', name: 'agroal-pool', version: '1.16'

// https://mvnrepository.com/artifact/com.oracle.database.jdbc/ojdbc10
implementation group: 'com.oracle.database.jdbc', name: 'ojdbc10', version: '19.14.0.0'

`

In provider factory I have

`

 @Inject
 AgroalDataSource dataSource;

`

However on datasource.getConnection() I get

`

2022-04-19 10:53:30,473 ERROR [org.keycloak.services.error.KeycloakErrorHandler] (executor-thread-3) Uncaught server error: 
java.lang.NullPointerException

`

Does anyone has idea here how should the datasources used correctly?

steff333 · 2022-05-06T14:44:01Z

steff333
May 6, 2022

Any new progress? I'm facing the same issue and can't access the datasources as shown in
https://github.com/keycloak/keycloak/blob/main/quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/services/health/KeycloakReadyHealthCheck.java#L50

7 replies

eggyknap Jul 15, 2022

Thanks much, that worked great for me. I created quarkus.properties in Keycloak's conf/ directory, defined a new datasource inside (quarkus.datasource.myname.db-kind=postgresql, etc.), rebuilt Keycloak, and then from within my user storage provider, could retrieve a datasource like this:

import io.agroal.api.AgroalDataSource;
import io.quarkus.agroal.DataSource;
import io.quarkus.agroal.runtime.DataSources;
import io.quarkus.arc.Arc;
import java.lang.annotation.Annotation;
...
    public void someFunction(...) {
            agroalDataSource = Arc.container().instance(DataSources.class, new Annotation[0]).get().getDataSource("myname");                                                                                      
            conn = agroalDataSource.getConnection();
            // Now use the connection like any other JDBC connection
            // ...
    }

The hardest part was probably finding just the right stuff to import :)

steff333 Jul 15, 2022

Hey eggyknap

Great, that its working for you as well.
I found this solution rather ugly, so after checking the quarkus sourcecode it can be simplified by

import io.quarkus.agroal.runtime.DataSources;
....

    private javax.sql.DataSource createDatasource() {
        try {
            return (javax.sql.DataSource) DataSources.fromName("myName");
        }

eggyknap Jul 18, 2022

That's considerably cleaner, thanks. Now, however, I get errors that my connection is already closed, when the enclosing JTA system tries to commit the transaction. This is the latest in a long series of disappointments trying to get this to work; for now I'm going back to our old, soon-to-be-unsupported authentication method, because I've got to get other stuff done than just messing around with Keycloak

simin-c Jul 18, 2022
Author

Hi, as a reference: I did not use Agoral data source, as that requires an extra import.

I used this one

session.getProvider(JpaConnectionProvider.class).getEntityManager();

where the session is the KeycloakSession object in the constructor.

and then

this.query = this.em.createNamedQuery("QUERY_NAME", YOUREntity.class);

Hope this helps

< 8000 div class="avatar-parent-child flex-column flex-items-center TimelineItem-avatar left-0 tmp-ml-3">

steff333 Jul 18, 2022

Hey Joshua
even if its sounds a little weird, but I was facing the same issue with transactions.
My first try was defining the keycloak datasource (postgres) via environment variables as in every tutorial and add my second datasource (oracle db) with the conf file. This works ok but I ran in the transaction issues even though I don't use transaction. The oracle db is a second userfederation so read-only access.
Once I defined the postgres DB AND the oracle DB in the conf directory AND define the same postgres connection in the environment variables everythings worked as a charm.
Its a little weird, keycloak uses the connection to postgres (in my case) out of the conf directory during runtime and the connection in the environment variables to create the keycloak DB on the first startup.

Maybe something to try once you have a little time to experiment.

The solution from Simin works as well but only to get a connection the same database that keycloak is using for its own data imho

Navigation Menu

Repository navigation

Keycloak.x custom (federation) provider use datasource in keycloak.conf quarkus.properties #11464

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment 7 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Keycloak.x custom (federation) provider use datasource in keycloak.conf quarkus.properties #11464

Uh oh!

Uh oh!

simin-c Apr 19, 2022

Replies: 1 comment · 7 replies

Uh oh!

steff333 May 6, 2022

Uh oh!

eggyknap Jul 15, 2022

Uh oh!

Uh oh!

steff333 Jul 15, 2022

Uh oh!

eggyknap Jul 18, 2022

Uh oh!

simin-c Jul 18, 2022 Author

Uh oh!

steff333 Jul 18, 2022

simin-c
Apr 19, 2022

Replies: 1 comment 7 replies

steff333
May 6, 2022

simin-c Jul 18, 2022
Author