Integrate mosparo into keycloak

[xundeenergie]

I did not find any information, how to integrate mosparo into keycloak as alternative to googles recapchta.
I found one for hcaptcha https://github.com/p08dev/keycloak-hcaptcha but i have no idea, how to do this for mosparo.

[zepich]

Hi @xundeenergie

Thank you very much for your question.

The hCaptcha provider is a perfect example how to do it.

In general, it must be possible to configure the connection to a mosparo installation (like in the hCaptcha configuration screen https://github.com/p08dev/keycloak-hcaptcha/blob/master/img/step-03.png).

After that, the mosparo frontend code must be added to the template. I guess that's done here: https://github.com/p08dev/keycloak-hcaptcha/blob/master/img/step-05.png

And then, the code must connect the settings with the template (providing all the required information from the config page to the template).

Of course, the code must verify the data with the mosparo installation. That's done in the code here, I guess: https://github.com/p08dev/keycloak-hcaptcha/blob/master/src/main/java/de/itrupp/p8/keycloak/authenticator/RegistrationhCaptcha.java#L156

If you're a developer, we can work through the creation of an integration for Keycloak. If you're not a developer, that's fine. I will have a closer look at it in the next few days.

Kind regards,

zepich

[zepich]

Hi @xundeenergie

My committed version from yesterday fully works with Keycloak 23.0.6 - at least on my machine. What version of Keycloak do you use?

My feedback:

1. The error message you sent makes no sense. I think you haven't tested my version, because there is no getFirst() in my version in line 174. Can you verify that you tested my version?
2. There is a merge conflict stuck in the committed file. You should resolve that one https://git.schuerz.at/jakob/keycloak-mosparo/src/branch/master/src/main/java/at/schuerz.keycloak/authenticator/RegistrationMosparo.java#L157
3. I don't know exactly why you removed these lines (https://git.schuerz.at/jakob/keycloak-mosparo/commit/33aec2d52c88f930c732fe33de7ad8b26be08f61, Lines 81, 82, and 122), but they are required since we need the private key to verify the form data.
4. In the partly-working branch, I can see my first commit from Thursday, but there is no recent commit. Can you verify that you've pushed the latest commits there?
5. I recommend setting the https:// in the configuration field and not hardcoded here because then you can copy the values for the configuration 1:1 from your mosparo installation (https://git.schuerz.at/jakob/keycloak-mosparo/commit/d94b801c965b72bb3286e14690b0b631ab137d27).
   

Please clean up the committed version and test it again. Please let me know what line the error message appears after the cleanup.

Kind regards,

zepich

[xundeenergie]

It's strange... seems to be a java-problem.
Which java do you use to compile it?

This shows my intellij

I use JAVA 17
Keycloak is 23.0.6

[zepich]

Okay, that's the problem. I use OpenJDK 21.0.2.

I will test it out with v17.

[xundeenergie]

I had to do some small modifications.
Please look at https://git.schuerz.at/jakob/keycloak-mosparo/src/branch/working

Now it compiles and works for me.

[xundeenergie]

In debian the newest openjdk is 17 :)

[xundeenergie]

Had some rebase-troubles...
Now i recreated the repo new and have 2 branches.
Master for JAVA 17
java21 for JAVA 21

I also pushed the repo to github as mirror.

And now i will update the README.

Thank you for your work and help. @zepich

[zepich]

Hi @xundeenergie

Amazing! Thank you very much for your feedback and work. I've tested the master branch with JDK 21, and it works perfectly fine. I think you can maintain one branch to make it easier to use it.

Kind regards,

zepich

[xundeenergie]

I've a new problem with mosparo.
But i don't know, when it comes into the system.

What i see is, the mosparo javascript "mosparo-frontend.js" loads successfully. But the script is not executed and the fields, for example _mosparo_validationToken is not created. In case of that, the mosparo-validation fails in keycloak.

Maybe a keycloak-update broke this flow.

So... the same... hcaptcha-flow must be broken too?

[xundeenergie]

could solve it. Changed it in the readme of my repo.

https://github.com/xundeenergie/keycloak-mosparo
https://git.schuerz.at/jakob/keycloak-mosparo

[zepich]

Hi @xundeenergie

Thank you very much for your post.

I guess the frontend JavaScript initialization code was missing or had a problem, correct? Or what was exactly the problem (just that others know what they have to do if they experience the same issue)?

Kind regards,

zepich

[xundeenergie]

Yes. I forgot to modify the theme in the jar-file...

And i had to add "https://" in front of {mosparoHost}, because it redirected it to suburl under my keycloak.
Added this to my keycloak-mosparo repo(s) i linked above.

now it works

[zepich]

Perfect, thank you very much for the information!