Skip to content

Latest commit

 

History

History
13 lines (10 loc) · 966 Bytes

README.md

File metadata and controls

13 lines (10 loc) · 966 Bytes
Raw

Web application with Identity and Access Management

Project for Service Oriented Architectures Security (SOASec) course at University of Milan.

This web app lets the user login and see a different image depending on his roles to simulate different privileges.

How it is composed

The project consists of 4 Docker containers:

  • A web application written in Python using the Flask framework, running on the gunicorn web server
  • A Keycloak IAM server to which the user can login with the OpenID Connect protocol via the web application
  • The PostgreSQL database for Keycloak
  • Nginx as a reverse proxy for both the web app and keycloak, which is also the endpoint for TLS using Let's Encrypt Certificates.

It has been deployed to a Linux server running on a Linode machine following security best practices, the server also scored an A+ on the Qualys SSL Labs test.