keycloak-connect

import express from 'express'; import session from 'express-session'; import Keycloak from 'keycloak-connect'; import path from 'path'; const app = express(); // Session store setup for Keycloak const memoryStore = new session.MemoryStore(); app.use(session({ secret: process.env.SESSION_SECRET ?? 'superSecretSessionKey', resave: false, saveUninitialized: true, store: memoryStore })); // Keycloak configuration (replace with your actual Keycloak client details) // This example assumes a keycloak.json file is not used and config is inline. const keycloakConfig = { realm: process.env.KEYCLOAK_REALM ?? 'myrealm', 'auth-server-url': process.env.KEYCLOAK_AUTH_SERVER_URL ?? 'http://localhost:8080/auth', resource: process.env.KEYCLOAK_CLIENT_ID ?? 'my-express-app', 'public-client': true, 'ssl-required': 'external', 'confidential-port': 0 }; const keycloak = new Keycloak({ store: memoryStore }, keycloakConfig); // Mount Keycloak middleware app.use(keycloak.middleware({ logout: '/logout', admin: '/admin', protected: '/protected' })); // Define routes app.get('/', (req, res) => { res.send('<h1>Public Page</h1><p><a href="/protected">Go to Protected Page</a></p><p><a href="/logout">Logout</a></p>'); }); app.get('/protected', keycloak.protect(), (req, res) => { res.send(`<h1>Protected Page</h1><p>Welcome, ${req.kauth.grant.access_token.content.preferred_username ?? 'user'}!</p><p><a href="/">Go to Public Page</a></p><p><a href="/logout">Logout</a></p>`); }); app.get('/login', keycloak.protect(), (req, res) => { res.send('You should be redirected to Keycloak for login, then back here if successful.'); }); // Error handling for Keycloak app.use((err: any, req: express.Request, res: express.Response, next: express.NextFunction) => { if (err && err.name === 'UnauthorizedError') { return res.status(401).send('Unauthorized'); } next(err); }); const PORT = process.env.PORT ?? 3000; app.listen(PORT, () => { console.log(`Server running on http://localhost:${PORT}`); console.log('Ensure Keycloak is running and configured with a client named \'my-express-app\'.'); });