Hi,
We are looking for an individual software engineer, with an expertise in OAuth2, and in particular Keycloak (6.0.1+).
Project objective:
- Create a one-off import of all our existing users into Keycloak (that is: not going through a custom user storage SPI).
- Some users have normal passwords (hashed+ salt) whilst some are through an ID provider (Facebook), so the Identity provider origin should be retained and seamless.
- Users shouldn't have their password reset, but we would like the hashing algorithm to be upgraded on first connection through the new flow.
- We have a quick and dirty prototype SPI that is able to check the legacy hash.
- Themes (based on existing designs) for the login and registration pages.
Deliverable:
- Migration tool in Java 11 & Springboot 2
+ Loads existing users from our database
+ Create users inside KC (with the relevant distinction between normal users and the facebook-identity-providers ones)
+ Have the migration tool able to be easily extended so that it is possible to then create resource-based permissions for our existing resources as part of the migration.
- KC realm configuration
+ Relevant flow to upgrade the password algorithm as users authenticate with the new system (including SPI if required)
+ Theme for login and registration matching our existing designs
-- Out of scope --
There is strong potential for further collaboration on extending and adding features to our platform, depending on how well we get along!
About the recuiterMember since Sep 29, 2017 Brooklyn
from Ontario, Canada