I want to use keycloak as openId Connect implementation via docker with a postgres db. I could not find a resource where it is documented whether keycloak stores user data encrypted. Only passwords seem to be hashed. Postgres provides pgcrypto as a way to execute encryption and decryption at runtime. Is there a way to enable crypto for user data with keycloak?
1 Answers
Keycloak provides an option called User Storage SPI
https://www.keycloak.org/docs/latest/server_development/#_user-storage-spi
With this, you can build a bridge between keycloak and your DB.
You will have the freedom to store your data in DB as per your convenience and when keycloak invokes the User storage SPI method you will have to return as per keycloak's specifications.
Related