- Custom authenticator creates and logs in a guest user when the authorization request has guest=true; other requests get the login form - Scheduled task removes guests with no remaining sessions - Realm export with mancala-web PKCE client, guest role and guest-aware browser flow (verify profile disabled so guests are not asked for details) - Dockerfile building the extension into a Keycloak 26.7.5 image - Keycloak and Postgres in compose; nginx proxies auth.playmancala.app and rate limits the auth endpoint - Integration tests run the extension and realm in a Keycloak container
2 lines
18 B
Plaintext
2 lines
18 B
Plaintext
extension/target/
|