This repository contains the source code for the pravega-keycloak-client library, which extends Pravega to use Keycloak Authorization Services to protect Pravega streams.

Follow this procedure to connect to a Pravega cluster that is protected by Keycloak.

Update your dependencies to link to the pravega-keycloak-client library, which is hosted in the jcenter repository.

For example, in Gradle:

repositories {
    jcenter()
    mavenCentral()
}
dependencies {
    implementation "io.pravega:pravega-client:0.6.1"
    implementation "io.pravega:pravega-keycloak-client:0.6.1"
}

Your application authenticates to Pravega using credentials found in a Keycloak client configuration file, which is typically named keycloak.json. Use the Keycloak UI, or consult with product documentation, on how to provision a Keycloak client.

Specific requirements:

1. Access Type: Confidential
2. Service Accounts Enabled: Yes

A Keycloak client which has a service account is able to be the subject of authorization policies. See product documentation on how to grant access to your client to specific Pravega scope(s).

The Pravega client library expects a few environment variables to be set to use the Keycloak extension.

Become one of the contributors! We thrive to build a welcoming and open community for anyone who wants to use the system or contribute to it. Here we describe how to contribute to Pravega!

Pravega is 100% open source and community-driven. All components are available under Apache 2 License on GitHub.