https://github.com/fanqingsong/fastapi-keycloak-angular-sso
https://github.com/fanqingsong/fastapi-keycloak-angular-sso
Last synced: 3 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/fanqingsong/fastapi-keycloak-angular-sso
- Owner: fanqingsong
- Created: 2023-05-10T15:10:23.000Z (about 2 years ago)
- Default Branch: master
- Last Pushed: 2023-05-10T15:57:58.000Z (about 2 years ago)
- Last Synced: 2025-01-14T13:52:35.590Z (5 months ago)
- Language: TypeScript
- Size: 173 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# FastAPI-Keycloak-Angular
A small sandbox application that demonstrates Keycloak authentication for a
backend written in Python using [FastAPI](https://fastapi.tiangolo.com/) and
a frontend in [Angular](https://angular.io/). This application uses this
project
[https://github.com/mauriciovigolo/keycloak-angular](https://github.com/mauriciovigolo/keycloak-angular)
to handle the Angular part of the Keycloak communication.
## Prerequisites
* Docker and Docker Compose
* ... and Python and [Angular CLI](https://cli.angular.io/) to develop
stuff further.
## Running the app
Keycloak likes to speak SSL, so this sandbox application uses self-signed
SSL certificates signed for the domain `proxy`. Unfortunately, we have
to use a name different from `localhost` due to the Docker setup, since
`localhost` within a Docker container refers to the container itself. So
in order to have the different Docker containers communicate properly, we
have to use something other than `localhost`.
To run the stack (Keycloak with a preconfigured realm, FastAPI and Angular),
do the following:
1. Add the hostname `proxy` to your `/etc/hosts` file, i.e. ensure that this
file has a line similar to e.g.
```
127.0.0.1 localhost proxy
```
1. Start the application from the root folder of this project with
```
$ docker-compose up -d --build
```
and give the stack a few moments to fire up. You can follow the logs
with
```
$ docker-compose logs -f
```
1. Open a browser and navigate to `https://proxy/something-cool`. The
browser will throw some warnings due to the self-signed certificate,
but you can safely accept these.
## Disclaimer
This app is not production ready in its current state (e.g. certificate
verification has been disabled in the Python backend, users with
trivial passwords have been pre-configured, there is no test suite,
allowed origins are set way too broad,...).