Implementación de una plataforma de experimentación que permita evaluar el nivel de seguridad de los servicios que brinda Keycloack con Oauth 2.0 para dispositivos android y web (angular)

Abstract

Applications currently suffer great conflicts in login authentication from different sites with little security because there is no centralized platform to securely manage access to systems. Currently, access control to resources is based on roles and permissions granted to the user, which makes the security of Web applications and Apps susceptible to daily malware attacks (malicious software that is harmful to computer systems). According to this problem we propose the implementation of an experimental platform to evaluate the level of security, for this we will design a Web application (Angular) and Apps (Android) using java 8+, spring boot, postgresql database, the access levels will be coded for authentication and 2 authorization of access to the system. After the implementation, security tests will be performed to the empoind webservices, test case where if the profiles or access roles are not available, the login will be denied. Keycloak provides a centralized platform for single sign-on management to protect data from unknown and unauthorized access through mechanisms that have a high level of security in order to identify who is actually authorized to access system resources.