Hi Christian and Rob, as the authors of the code you point to we confirm that interacting with Keycloak in XQuery and in particular RestXQ is rather comfortable. That example is mostly a demonstration code for a tool that scrapes a site index and registers sites named gateways as public clients (in Oauth2 sense) into a Keycloak instance. It is a proof of concept (as you can see from the credentials  :-D) that has been used as a batch one-time migration in a particular setting.

We have also a RestXQ module that in combination with basex:perm annotations protects access to a GUI implementing the Oauth2 Code-grant flow. If Rob is interested we could share.

If there should be any plan of integrating Oauth2/OIDC flows more tightly into BaseX we could also be available for helping out.

Regards, Marco.

On 30/04/21 08:47, Christian Grün wrote:

Hi Rob,

There is no prepackaged module for Keycloak (at least I’m aware of none), but you can write your own code with XQuery. See [1] for an example how this might look like.

Are you using RESTXQ?

Best, Christian

[1] https://code-repo.d4science.org/gCubeSystem/d4science-keycloak-themes/src/br...

On Thu, Apr 29, 2021 at 3:54 PM Rob private@tjalma.com wrote:

...

Hi,

I have a question. Can BaseX make use of an Identity Management application like Keycloak for Users?

I can’t find anything about it :)

With kind regards, Rob Tjalma