This page tests login with Keycloak, configured as an OpenID Connect server. The example authentication handler uses the Pac4J Java Security Framework with custom integration to let it work with Flight v2 authentication from Deephaven.

The configuration is somewhat complex, mostly to ensure that the Deephaven client and server agree about which server they will be connecting to and how - KeyCloak lets a specific base URL, realm, and clientId be specified to construct the complete URL, based on its conventions. For a client implementation where these details are known to it, the server need not specify these options.

The client code on this page will attempt to read these settings, load the Keycloak JS adapter, and authenticate the user. Note that you may return to this page during this process and need to click "Go" again - for a real client implementation, this could be an automatic process.

There are two accounts by default for this sample: admin, and user. For both, the password is the same as the username. To administer Keycloak, open the base URL (default is http://localhost:6060/) and log in as admin, with password password.