Skip to content

Commit

Permalink
[WFLY-17649] Add a detailed quickstart for bearer authentication use …
Browse files Browse the repository at this point in the history
…cases
  • Loading branch information
gaol committed Nov 30, 2023
1 parent 8702919 commit 8bb8eda
Showing 1 changed file with 80 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,80 @@
---
categories:
- quickstarts
- bearer
---
= A quickstart to demonstrate securing EJB with SASL OAUTHBEARER
:author: Lin Gao
:email: [email protected]
:toc: left
:icons: font
:idprefix:
:idseparator: -

== Overview

This quickstart tries to demonstrate how to configure authentication and authorization to secure the remote EJB invocations with bearer tokens.

The https://www.keycloak.org/[Keycloak] will be used as the Identity Provider(IDP) during the demonstration with predefined identities information.


== Issue Metadata

=== Issue

* https://issues.jboss.org/browse/WFLY-17649[WFLY-17649]

=== Related Issues



=== Dev Contacts

* mailto:{email}[{author}]

=== QE Contacts


=== Testing By
// Put an x in the relevant field to indicate if testing will be done by Engineering or QE.
// Discuss with QE during the Kickoff state to decide this
[ ] Engineering

[x] QE

=== Affected Projects or Components

* WildFly Quickstarts

=== Other Interested Projects

* NONE

== Requirements

=== Hard Requirements

* Shows how to access a remote secured EJB from a remote Java client application.
* It uses `OAUTHBEARER` SASL mechanism to secure the EJB.
* Shows how to configure the application server to secure the EJB.
* Shows how to configure the remote Java client application to negotiate with an external bearer token issuer.
* Shows the result of calling remote EJB which checks current identity information.
* Shows how to configure the application server to propagate the authentication and authorization to another server.
* Shows the result of calling remote EJB which checks current identity information and the identity information used to call another EJB in different server.
* It should demonstrate the invocations with at least 2 identities.

=== Nice-to-Have Requirements

* NONE

=== Non-Requirements

* NONE

== Test Plan

*

== Community Documentation

* The new asciidoc section should be added to this quickstart directory of the WildFly Quickstarts repository.

0 comments on commit 8bb8eda

Please sign in to comment.