Custom OAuth2 to Keycloak migration

Hi,

We are looking for an individual software engineer, with an expertise in OAuth2, and in particular Keycloak (6.0.1+).

Project objective:

- Create a one-off import of all our existing users into Keycloak (that is: not going through a custom user storage SPI).
- Some users have normal passwords (hashed+ salt) whilst some are through an ID provider (Facebook), so the Identity provider origin should be retained and seamless.
- Users shouldnt have their password reset, but we would like the hashing algorithm to be upgraded on first connection through the new flow.
- We have a quick and dirty prototype SPI that is able to check the legacy hash.
- Themes (based on existing designs) for the login and registration pages.

Deliverable:

- Migration tool in Java 11 & Springboot 2
+ Loads existing users from our database
+ Create users inside KC (with the relevant distinction between normal users and the facebook-identity-providers ones)
+ Have the migration tool able to be easily extended so that it is possible to then create resource-based permissions for our existing resources as part of the migration.
- KC realm configuration
+ Relevant flow to upgrade the password algorithm as users authenticate with the new system (including SPI if required)
+ Theme for login and registration matching our existing designs

-- Out of scope --
There is strong potential for further collaboration on extending and adding features to our platform, depending on how well we get along!
About the recuiter
Member since Mar 14, 2020
Tin Foundation
from Cairo, Egypt

---

---

Offer to work on this project closes in 30 days!
Are you interested in this Opportunity?

Looking for help? Checkout our video tutorial
How to search and apply for jobs

How to apply? Do you have more questions about the Job?
See frequently asked questions