Keycloak 1.5.0.Final 发布，SSO 集成解决方案

James

欢迎加入运维网交流群:263444886  
　　Keycloak 1.5.0.Final 发布了，值得关注的改进内容有：

• 自定义认证流 - in 1.4.0 we introduced a new authentication and required actions SPIs, but we didn't make it possible to define your own flows. In this release you can now use the SPIs to create your own authenticators and also define your own authentication flows through the admin console
  
• 为客户端提供自定义认证流 - we also made it possible to create your own authenticators and flows to authenticate clients.
  
• 客户端签署的令牌认证 - we introduced support to authenticate users with public/private keys and signed JWT tokens. This complements the introduction of service accounts from 1.4.0
  
• Event/counter OTP for Google Authenticator and FreeOTP - through the admin console you can now configure if you want to use time based OTP or event based OTP
  
• 默认使用 Infinispan 缓存并移除内存中缓存 - we removed the custom in-mem caches we had in previous releases and now only support the Infinispan based caches
  
• 默认使用 Infinispan 用户会换管理，并移除内存、jpa 和 mongo 用户会话实现 - we removed the JPA, Mongo and in-mem user session providers and will now focus on just the Infinispan based provider
  
• keycloak.js 处理时间不一致的问题 - the time on end-users computers can often be out of sync so we now deal with this in the javascript adapter by estimating the time skew between Keycloak and the users computer
  
• 删除注册和用户管理里的地址信息 - we've simplified the registration screen and account management and removed the address fields. If you need to add these or others you can now refer to the new address example theme
  

　　完整内容请看 release notes.