From Zero to SSO Hero 🦸

Expert Exchange Event - Workshop

https://www.cloudflight.io/en/event/expert-exchange/

Let’s face it - most authentication setups in our company are inherited, rarely revisited, and often become siloed knowledge over time. This makes them harder to understand, improve, and modernize, potentially creating gaps in security or user experience. 🔓

This workshop will:

• Demystify authentication and authorization concepts
• Provide hands-on experience with Keycloak and OIDC
• Guide you through implementing secure applications

By the end: You'll understand how to implement and secure applications using industry-standard protocols.

Assignment

You can find context and your assignment here: workshop_slides.pdf.

Architecture and System Overview

Take a look at architecture.md.

Usage and Troubleshooting Guide

Table of Contents

• Prerequisites
• Getting Started
• Running the Application
• Troubleshooting
• Common Tasks
• User Credentials

Prerequisites

• Docker and Docker Compose
• Node.js 22 and npm
• JDK 21
• Gradle

Getting Started

1. Clone the repository
2. Ensure Docker is running

Running the Application

Starting the Environment

1. Start the Docker containers:

   docker compose up --build

2. Start the Accounting Frontend:

   cd accounting-frontend
   npm i
   npm run dev

3. Start the Accounting Backend:

   • Run the main method in accounting-backend/src/main/kotlin/example/oidc/accounting/AccountingSpringBootApplication.kt

Resetting the Environment

To completely reset the environment (this will erase all database data and Keycloak configuration through the browser):

docker compose down --volumes

Troubleshooting

Build Issues

• Gradle Build Failures: To build the backend with Gradle, you need the container environment running first, as the backend uses the database for running tests.

• Initial Build Test Failures: When building for the first time, some tests may fail. This is expected as part of the TDD approach. Fix the tests according to their requirements to properly connect the system.

Runtime Issues

• Service Won't Start: If a service is stuck on startup, check if the required port is already allocated by another process. Make sure required ports are available (8040, 8050, 8051, 8070, 8071, 8090, 5400, 5401)

• IntelliJ Can't Find Gradle Projects: If IntelliJ cannot find the backend Gradle projects, you may need to manually link them:

  1. Open the build.gradle.kts file in the project
  2. Click on the Gradle icon in IntelliJ
  3. Refresh the Gradle project

Common Tasks

• Accessing Keycloak Admin Console: Navigate to http://localhost:8040 and log in with the admin credentials.
• Accessing the Text Message Frontend: Navigate to http://localhost:8070
• Accessing the Text Message Backend's Swagger UI: Navigate to http://localhost:8071/swagger-ui/index.html
• Accessing the Accounting Frontend: Navigate to http://localhost:8050
• Accessing the Accounting Backend's Swagger UI: Navigate to http://localhost:8051/swagger-ui/index.html

User Credentials

All default passwords in the system are set to: password

Available users:

• admin: Has permissions for viewing and editing text messages and account info
• user: Has permissions for viewing text messages and account info
• intern: Has no specific permissions
• kcadmin: Keycloak administrator (for Keycloak administration)