{"id":183899,"date":"2026-10-15T17:01:27","date_gmt":"2026-10-15T15:01:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/vypusk-issuerd-0-1-17-keycloak-sovmestimogo-servera-upravleniya-identifikacziej-i-dostupom"},"modified":"2026-10-15T17:01:34","modified_gmt":"2026-10-15T15:01:34","slug":"issuerd-0-1-17-released-a-keycloak-compatible-identity-and-access-management-server","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/issuerd-0-1-17-released-a-keycloak-compatible-identity-and-access-management-server","title":{"rendered":"Wydanie Issuerd 0.1.17, serwera do zarz\u0105dzania to\u017csamo\u015bci\u0105 i dost\u0119pem zgodnego z Keycloak","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Opublikowano wydanie Issuerd 0.1.17 \u2014 serwer\u00f3w zarz\u0105dzania identyfikacj\u0105 i dost\u0119pem (IAM), realizuj\u0105cych protoko\u0142y OpenID Connect i OAuth 2.x oraz kompatybilnych z platform\u0105 Keycloak na poziomie modelu danych i steruj\u0105cego REST API. Zrealizowano SSO, MFA (TOTP, WebAuthn\/passkeys), federacj\u0119 u\u017cytkownik\u00f3w z LDAP i Kerberos\/SPNEGO, logowanie przez zewn\u0119trznych dostawc\u00f3w identyfikacji (OIDC, media spo\u0142eczno\u015bciowe), strony logowania z dostosowywanym wygl\u0105dem i lokalizacj\u0105, deklaratywn\u0105 pocz\u0105tkow\u0105 konfiguracj\u0119 z YAML podczas pierwszego uruchomienia. Serwer zosta\u0142 napisany w j\u0119zyku Rust (kod unsafe zabroniony na poziomie atrybut\u00f3w), rozpowszechniany na licencji Apache 2.0 i dostarczany jako jeden samodzielny plik binarny, w kt\u00f3rym wbudowane s\u0105 konsola administracyjna oraz konsola u\u017cytkownika. Kompilacje s\u0105 tworzone dla platform Linux, Windows i macOS (amd64 i
\narm64).<\/p>\n

Kluczowa cecha projektu \u2014 ci\u0105g\u0142a weryfikacja zgodno\u015bci
\nz oficjalnym zestawem test\u00f3w OpenID Foundation Conformance Suite (5.3.2). Testowanie odbywa si\u0119 w CI dla ka\u017cdego wydania w izolowanym \u015brodowisku docker. Wyniki po modu\u0142ach s\u0105 przechowywane w repozytorium, a pe\u0142en zestaw raport\u00f3w do\u0142\u0105czany jest do
\nka\u017cdego wydania. Parytet z Keycloak monitorowany jest zestawem test\u00f3w. W planach jest przej\u015bcie oficjalnej certyfikacji.<\/p>\n

Z protoko\u0142\u00f3w wykorzystywanych w scenariuszach z agentami AI zaimplementowano DPoP (RFC 9449, powi\u0105zanie tokenu z kluczem podmiotu), wymian\u0119 token\u00f3w (RFC 8693, ograniczenie uprawnie\u0144 przy wymianie tokenu) oraz CIBA (tryb poll, potwierdzenie dzia\u0142a\u0144 przez cz\u0142owieka). Wspierane s\u0105 r\u00f3wnie\u017c PAR (RFC 9126), JAR (RFC 9101), JARM, RAR (RFC 9396), dynamiczna rejestracja klient\u00f3w (RFC 7591\/7592), autoryzacja urz\u0105dze\u0144 (RFC 8628). Pe\u0142ny import 100 tysi\u0119cy u\u017cytkownik\u00f3w z MS Active Directory zajmuje oko\u0142o 30 sekund.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a Issuerd 0.1.17 — \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (IAM), \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b OpenID Connect \u0438 OAuth 2.x \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 Keycloak \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e REST API. \u0420\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b SSO, MFA (TOTP, WebAuthn\/passkeys), \u0444\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 LDAP \u0438 Kerberos\/SPNEGO, \u0432\u0445\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (OIDC, \u0441\u043e\u0446\u0441\u0435\u0442\u0438), \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u0445\u043e\u0434\u0430 \u0441 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u043c \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u0435\u043c \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183899","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wydanie Issuerd 0.1.17, serwera zarz\u0105dzania to\u017csamo\u015bci\u0105 i dost\u0119pem kompatybilnego z Keycloak | ProHoster","description":"Opublikowano wydanie Issuerd 0.1.17 - serwera zarz\u0105dzania to\u017csamo\u015bci\u0105 i dost\u0119pem (IAM), wdra\u017caj\u0105cego protoko\u0142y OpenID Connect i OAuth 2.x oraz kompatybilnego z platform\u0105 Keycloak na poziomie modelu danych i zarz\u0105dzaj\u0105cego.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/issuerd-0-1-17-released-a-keycloak-compatible-identity-and-access-management-server","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Issuerd 0.1.17, Keycloak-\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a Issuerd 0.1.17 - \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (IAM), \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b OpenID Connect \u0438 OAuth 2.x \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 Keycloak \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/issuerd-0-1-17-released-a-keycloak-compatible-identity-and-access-management-server","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-15T15:01:27+00:00","article:modified_time":"2026-10-15T15:01:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/183899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=183899"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/183899\/revisions"}],"predecessor-version":[{"id":183900,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/183899\/revisions\/183900"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=183899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=183899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=183899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}