I'd like to announce new minor releases of Pax Web: 8.0.16 and 9.0.5.
- Jetty 9.4.50.v20221201 (8.0.x) and 10.0.13 (9.0.x)
- Tomcat 9.0.72
- Undertow 2.2.23.Final
Another corner case was solved when WAB, Whiteboard and HttpService registered web elements were registered into the same target context (a case originally called "Where is JSF Support?").
A feature from Pax Web 7 is back - now both WebContainer (an extension to standard HttpService) and Whiteboard (this is new - there was no such option in Pax Web 7) can be used to register security configuration:
- login config
- security constraints
- security roles
And finally I've reviewed Pax Web 7 support for Keycloak. In Pax Web 7 it worked only in Undertow runtime (mostly due to problems on Keycloak side).
Now there are new Karaf features that ensure that Pax Web 8/9 can integrate with Keycloak 18 (which contains something called "Fuse Adapters") and Keycloak 20 (where "Fuse Adapters" were removed). These features are:
- pax-web-jetty-keycloak18
- pax-web-tomcat-keycloak18
- pax-web-undertow-keycloak18
- pax-web-jetty-keycloak20
- pax-web-tomcat-keycloak20
- pax-web-undertow-keycloak20
The "keycloak18" features are designed to work with Keycloak 18.0.x and require this feature repository: "mvn:org.keycloak/keycloak-osgi-features/18.0.3/xml/features"
The "keycloak20" features do NOT require Keycloak features (because Keycloak 19 has them removed) and Pax Web itself repackages proper Keycloak libraries (because not all of them are proper OSGi bundles).
If you want to know more about how I tested Pax Web with Keycloak, please look at the readme files:
For completeness, the changelogs is available for 8.0.16[1] and 9.0.5[2].