Does NodeBB provide support for a user database other than the one it builds in mongo? How would I integrate NodeBB with Keycloak?

David Sargrad

so it seems like i can define a provider now.. Not sure how to set this. I'll consult with some guys internally to see what i can learn about an "OAuth2 endpoint" exposed by Keycloak.

David Sargrad

Do I need full URL's in the following?

Are fields like the authorization url required? Is the client secret required? We do have a client id that has a secret.

What looks wrong in the following? I get an "invalid data" message when I attempt to confirm.

David Sargrad

Do I need full URL's in the following?

Are fields like the authorization url required? Is the client secret required? We do have a client id that has a secret.

What looks wrong in the following? I get an "invalid data" message when I attempt to confirm.

Apparently the client secret is required.

David Sargrad

I was able to get to the Keycloak login prompt:

However the following failure occurs when I login.

Currently using this configuration:

Looking in keycloak, it did create a session for that login

julian

What's the username of the user you're trying to log into? Sounds like there may be some incompatible characters.

David Sargrad

The username is "dave1".. the email is a fake email: [email protected]

David Sargrad

I also have a [email protected] user..

They both should work.

julian

With those values, yeah, it should work.

At this point, I'd need some additional debugging info. Can you please go to library.js in the plugin and search for the string // New user?

Add this directly below it, but before the user.create call:

console.log(payload);

Then restart NodeBB. I'd like to see what the profile data is normalized to.

David Sargrad

on it. do i need to rebuild nodebb when i modifiy the plugin?

David Sargrad

Hmm.. I dont see a console log.. I modified the library.js in the plugin directory.

Do I need to npm link that again?

Also I do see the following error in the console.. when I login.. This suggests that the callbark URL is not correct.

David Sargrad

Maybe I misconfigured the redirect URI in the keycloak client:

David Sargrad

Yet that seemed to be the one to use..

julian

@David-Sargrad You're seeing a 500 error, which means it's the right URL but something happened on the backend. If it was the wrong URL it'd be a 404

If you modify a backend file, you have to restart NodeBB (but you don't have to rebuild). The files are cached (by Node.js) so you need to restart NodeBB so the cache is empty.

David Sargrad

i see.. for some reason the console.log didnt go to the console.. that said.. i'm at the breakpoint where the console.log is ...
This is my payload object:

julian

Nice. It's the @... you'll want to have Keycloak send a username, not the email.

David Sargrad

I see.. You are too good!

SO the @ in the handle is problematic?

julian

Yeah, I'm not immediately certain why @ was omitted, but this is an excerpt of the expression that defines what characters are allowed:

'" \-+.*[\]0-9\u00BF-\u1FFF\u2C00-\uD7FF\w

Some symbols, numbers, letters, and select unicode ranges. Gone are the days when the expression used to be ^\w+$

David Sargrad

I see.. Now to see if Keycloak allows me to modify that.. I'd assume so.

David Sargrad

any idea why the console.log didnt actually go to the console? odd .. since the code seems to be there.

julian

No clue... but if the breakpoint works, then just use that. console.log debugging is for simpletons like myself anyway right

It's like bringing a club to a gun fight.