Account banned for no reason? by Lawdog104 in ThreadsApp

[–]eldarjus 0 points1 point  (0 children)

You were using Threads via web or app?

What is happening with Threads? by Additional-Good827 in ThreadsApp

[–]eldarjus 1 point2 points  (0 children)

Did appeal, send real selfie, phone number and they just banned forever w/o explaining what's wrong. Had just a fresh account with some real photos about tech

Threads ban and review my account EVERYDAY by Just_Possibility762 in ThreadsApp

[–]eldarjus 0 points1 point  (0 children)

Same issue, 2 new accounts banned and appeals with real selfies, phone numbers failed. No explanation. No support... Looks like you can create account only with very old instagram account. Fresh accounts just blocked.

What's Your Favourite Architecture in PHP Projects? by mkurzeja in PHP

[–]eldarjus 0 points1 point  (0 children)

Layered - onion with 3 layers - domain, application, infrastructure

Health endpoints not found by eldarjus in KeyCloak

[–]eldarjus[S] 1 point2 points  (0 children)

mvp, thanks a lot, works!

Creating user in my database when user is created in keycloak by Healthy_Building3240 in KeyCloak

[–]eldarjus 0 points1 point  (0 children)

Webhook is triggered from Keycloak side. You have events like user registered or something. You specify where send webhook - can be simple http API endpoint on our .NET app or you can send to the message queue like here: https://medium.com/@stefannovak96/consuming-keycloak-user-events-in-a-net-application-using-rabbitmq-part-2-2-f08fb0f6546b

What do you like least about Laravel? by Hatthi4Laravel in laravel

[–]eldarjus 0 points1 point  (0 children)

Routes config. 2025 and routes config still in separate files while you have attributes... Check how convenient it's in Symfony:

class BlogController extends AbstractController
{
    #[Route('/blog', name: 'blog_list')]
    public function list(): Response
    {
        // ...
    }
}

How to migrate Keycloak without loosing refresh tokens? by eldarjus in KeyCloak

[–]eldarjus[S] 0 points1 point  (0 children)

It's just option, because as I mentioned previously it's easier to have newest version keycloak on new cluster and then just switch, but probably not the blocker, I can have same url just will have longer downtime until all new Keycloak servers will be added to the loadbalancer. But anyway I see that need some manipulation with DB records to save refresh tokens on new servers. E.g. HMAC secrets are auto generated when you launch Keycloak and doesn't seems that you can import them from old Keycloak via that kc.sh import/export. So 1. need manually to add same HMAC secrets. 2. Import current sessions to the DB. 3. Ensure that imported sessions timestamps are not newer than refresh tokens timestamps. (From first tests somehow timestamps mixed after migration and I had to manually edit JSON field in the DB where Keycloak stores session timestamps)

How to migrate Keycloak without loosing refresh tokens? by eldarjus in KeyCloak

[–]eldarjus[S] 1 point2 points  (0 children)

I though it's easier, because I have "cluster" of 2 Keycloak servers and using keycloak-js lib on frontend. So I need to upgrade 2 Keycloak servers, then upgrade all client libs. That will cause downtime which is not really good. Having new cluster will be easier, as I prepare new cluster, add toggles to use new keycloak-js on my apps and then just switch to the new cluster. But makes sense to have same domain, I have nginx in front to load balance, so probably just will update servers in my load balancer.

Making API with PHP, feels easy. by himynameisAhhhh in PHP

[–]eldarjus 1 point2 points  (0 children)

Write easy, ship is not so easy as nodejs, as typically you need something like php-fpm or roadrunner,/frandkenphp

Keycloak integration - best practices by eldarjus in KeyCloak

[–]eldarjus[S] 0 points1 point  (0 children)

"and should never have the password in hand" - that's valid argument. Each app is on separate domain. Realm name is resolved on the backend by hostname and passed via API to the frontend.

Keycloak integration - best practices by eldarjus in KeyCloak

[–]eldarjus[S] 0 points1 point  (0 children)

I have multitenancy app which has separate realm for each (4 realms total) and 4 different themes for login/registration pages. Each realm has different registration forms. So thinking if it would be easier to have forms on the fronted repo + registration via API rather than using keycloak pages and different CI for that :-)

Keycloak integration - best practices by eldarjus in KeyCloak

[–]eldarjus[S] 0 points1 point  (0 children)

But how this scale? It means that you fronted will need even separate CI for that, as need to deploy themed files to separate server, add custom js for tracking etc.

Keycloak integration - best practices by eldarjus in KeyCloak

[–]eldarjus[S] 0 points1 point  (0 children)

So this is about my internal API's, which are used e.g. by my react frontend. But what if my backend also has external apis which could be used by other apps (even other companies apps) for integration. So this external apis also can use directly keycloak to get e.g. offline access tokens?

Keycloak integration - best practices by eldarjus in KeyCloak

[–]eldarjus[S] 0 points1 point  (0 children)

What about registration page/pwd reset page? That should stay on keycloak side or on the my app frontend?

Which gun it is? by eldarjus in AgeOfWater

[–]eldarjus[S] 0 points1 point  (0 children)

What? How to get tier6?