SSO 集成解决方案 Keycloak 2.5.0.CR1 发布了。
该版本主要是修复了 bug，在这个版本已经解决了 165 个 issue。值得关注的更新：
-
用户存储 SPI - We've removed the old User Federation SPI in this release. If you have custom user federation providers you will need to migrate them to the User Storage SPI.
-
HMAC 密钥提供程序 - We've added a secret key provider to be able to do HMAC signatures. These are faster than RSA signatures and are used for signing cookies.
-
可劲用 Impersonation - If you don't want to allow admins to be able to impersonate users you can now fully disable this feature.
这是 Keycloak 2 系列的第二个到最后的版本。期待 1 月底一个更多的 bug 修复和 2.5.1.Final 的发布。之后，将开始使用 Keycloak 3。
未来计划：
-
Multi data center support - It's kinda possible at the moment, but we are planning to do a lot of improvements in this area
-
Authentication SPI - We're aiming to cleanup the authentication SPI and may also be adding more built-in authentication capabilities
-
Validation on Admin Endpoints and Console - There's currently a lack of validation on the admin endpoints which could result in bad configuration
-
Profile SPI - Single configurable and extensible place to define validation for user validation for self-registration, account management and the admin console
-
New Account Management - New modern and easier to use account management console
-
Testing and CI - More automated testing, better test coverage and more Jenkins!