CCCHH/ansible-infra
CCCHH/ansible-infra
Watch
3
2
Fork
You've already forked ansible-infra
 1
Code Issues 20 Pull requests 14 Wiki Activity Actions

Manage the CCCHH browser authentication flow as YAML #150

Open
stb wants to merge 2 commits from keycloak-browser-flow into main
pull from: keycloak-browser-flow
merge into: CCCHH:main
Conversation 1 Commits 2 Files changed 168 +35015

2026-09-02

Stefan Bethke
Manage the CCCHH browser authentication flow as YAML
All checks were successful
/ build (pull_request) Successful in 47s
Details
/ Ansible Lint (push) Successful in 5m31s
Details
/ Ansible Lint (pull_request) Successful in 4m35s
Details 
Adds a keycloak_auth_flow role that locally validates flow
definitions (structure, nesting depth, known provider IDs, and a set
of Keycloak authentication-flow gotchas: conditions silently ignored
outside a Conditional subflow, keycloak/keycloak#29515's OTP+WebAuthn
sibling bug, conditional-credential config shape/semantics, and more)
before deploying them idempotently via
middleware_automation.keycloak.keycloak_authentication_v2.

Includes the CCCHH realm's actual "browser passkey and token" flow
(the realm's real browserFlow binding, not the untouched built-in
"browser" flow), exported from the live server so it's now reviewable
and redeployable from this repo instead of only editable in the
Keycloak admin console.
32b5f147bc
2026-09-02 11:07:45 +02:00
Stefan Bethke
Vendor middleware_automation.keycloak collection 
Needed for keycloak_authentication_v2, to manage Keycloak
authentication flows (e.g. the CCCHH browser flow) as YAML.
Chosen over community.general's own copy of the module (deprecated in
favor of this collection, and limited to 4 sub-flow levels there vs.
10 here).
4832e5da5d
2026-09-02 10:46:57 +02:00