Today I Learned

Current Servlet Request in a CDI Bean

15. Feb 2024

How to inject the current request into a @RequestScoped CDI bean:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17


import javax.inject.Provider;

@RequestScoped
class Foo {

    private final Provider<HttpServletRequest> currentRequestProvider;
    
    @Inject
    public Foo(Provider<HttpServletRequest> currentRequestProvider) {
        this.currentRequestProvider = currentRequestProvider;
    }
    
    @PostConstruct
    public void postConstruct() {
        currentRequestProvider.get().getRequestURL()
    }
}

You must wrap the request in a Provider or else the application server will complain that there does not (yet) exist a bean of that type.

Keycloak login without a password

15. Feb 2024

If you have an application which requires changing the user frequently, e.g. for reproducing bugs, testing or demonstrating new features, then you can make that process less tedious by defining a custom login flow, which only validates a username and requires no password:

Screenshot showing a keycloak login flow with two steps: Username Form and Username Validation

Combined with keycloak’s login_hint parameter, that makes for quite a frictionless experience. All without hacking together some awful custom auth in your application, which you must be careful to never enable in production. Of course, you must be careful that this login flow never makes it into production, too.