-
|
I want to use Keycloak as a single source of truth for authentication to all my microservices including my main Django application. For this to work, I connected my Keycloak server as an OpenID Connect source and I handle all kinds of social and password login through Keycloak itself. Now everything works fine but I want the login selector page to be skipped and to be redirected directly to my Keycloak login page when I am trying to reach a @login_required endpoint. In other words, I want to skip this page as it only introduces some unnecessary clicks: |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
You could replace the login template with a version that automatically initiates a redirect to Keycloak (e.g. |
Beta Was this translation helpful? Give feedback.
-
|
I played with your idea a bit and while it is a good start, the solution will be much more complex. I can't just redirect to my Keycloak URL as Keycloak uses a state variable in its URL and it is unclear how it is calculated. I think that this state includes the CSRF token and the next attribute in some way as I need to pass this information. Therefore, I think the best and most robust solution is by "pushing the buttons" from JS. I could eliminate the first click by overwriting the templates/allauth/account/login.html template: And the second click by overwriting templates/allauth/socialaccount/login.html with a JS that pushes the "Continue" button. This concludes my issue. Thank you a lot for the help. |
Beta Was this translation helpful? Give feedback.
I played with your idea a bit and while it is a good start, the solution will be much more complex. I can't just redirect to my Keycloak URL as Keycloak uses a state variable in its URL and it is unclear how it is calculated. I think that this state includes the CSRF token and the next attribute in some way as I need to pass this information.
Therefore, I think the best and most robust solution is by "pushing the buttons" from JS. I could eliminate the first click by overwriting the templates/allauth/account/login.html template: