Custom Keycloak Build

SunbirdRC uses a custom Keycloak image that makes NONCE validation toggleable — a change not available in stock Keycloak, added specifically to support Digilocker Meripehchaan SSO (tracking issue).

Sunbird RC/keycloak Build docs

NONCE validation is on by default; set VALIDATE_NONCE=false to disable it.

Prerequisites: JAVA 11 (tested with 11.0.8), Maven.

1

Build the distribution jar

git clone https://github.com/Sunbird-RC/keycloak/tree/configurable-nonce-validation
mvn clean install -Pdistribution

Output lands in distribution/server-dist/target.

2

Build the Docker image

git clone https://github.com/keycloak/keycloak-containers/tree/main/
git checkout 14.0.0
cd server
python -m http.server 8001
docker build -t sunbirdrc/keycloak --build-arg KEYCLOAK_DIST=http://<YOUR_IP_ADDRESS>:8001/keycloak-14.0.0.tar.gz .

3

Push it

Tag and push to your Docker registry.