Christian Felsing

Results 22 comments of Christian Felsing

2FA is easy to implement if using Keycloak as auth backend for Alovoa.

This should be possible with a local Keycloak IDP server. Use Keycloak as IDP for Alovoa and configure any auth backend in Keycloak. I built such a Alovoa set up...

That's one of the reasons, why I would like to delegate AuthN away from Alovoa to Keycloack. At least an email mapping in Keycloak should do the job. I do...

Use https instead of ssh. Protocol ssh needs private/public key authentication on Github.

Are there any plans to support http/3?

#311 should not break things. At least it adds some dependencies regarding tests only, so a unit test with a automated security test based on OWASP Zap becomes available. Spring...

If you need help to set up such an environment, I can help you. I am installed several dev, test and prod Keycloak installations with reverse proxy, prod is reachable...

Keycloak is an Open Source identity provider solution. It support OpenID/Connect, OAuth2 and SAML. OAuth2 is used for this Alovoa PR. Keycloak allows using many backends even Active Directory is...

A theoretical approach [Fake Profile Detection Using Machine Learning Techniques](https://www.scirp.org/journal/paperinformation.aspx?paperid=120727) regarding a machine learning solution. Obviously that is a really big project and should be developed outside from Alovoa. Some...

Simply solved by patched SecurityConfig.java on my Alovoa fork (see branch cf-full-featured): I delegated that requirement to my private OpenID/Connect provider (Keycloak). On my test environment Alovoa users can use...