Questions tagged [keycloak-rest-api]

This tag should be used for questions related to the Keycloak Admin Rest API. For instance, "is there an endpoint where I can request X information about the users?"

The Keycloak features provided by the Admin Console can be triggered via the Keycloak's Admin Rest API.

472 questions
0
votes
1 answer

403 Forbidden while accessing Leycloak rest API with a valid user credentials

I have set up a Keycloak server and a user named 'sample' is given permissions to access the rest ADMIN APIs, I granted permissions to the relevant realm and client_id. And I'm able to access the rest APIs using the postman service using this user…
Lisa
  • 655
  • 3
  • 10
  • 34
0
votes
2 answers

Springboot with Keycloak always return 403

I have created a Springboot application with Keycloak by following this tutorial Baeldung When I try to enter /api/foos it always returns 403 without any error messages. //…
Kanzt
  • 135
  • 1
  • 6
  • 13
0
votes
1 answer

What is the query format for "< string > array(csv)" schema in Keycloak Admin API?

In Keycloak Admin REST API, I am trying to perform GET /{realm}/events request for getting events by realm. In the docs it says to filter by type of event you add the query param < string > array(csv). However that schema is not exactly clear, for…
E. Karim
  • 649
  • 7
  • 14
0
votes
1 answer

Keycloak Federated Users - Trigger Password Reset Email in Custom SPI

We implemented a keycloak SPI to perform lookups/updates on an external user database. One of the features we wanted to implement is to trigger an email when users reach a certain number of login attempts. This is something we did in pre-keycloak…
javacup
  • 45
  • 1
  • 1
  • 9
0
votes
0 answers

KeyCloak with AzureAD

I'm trying to configure my environment in keycloak to authenticate with azure active directory according to the documentation ( https://www.keycloak.org/getting-started ) with an image already created in docker, I managed to do the configuration…
0
votes
0 answers

Get request with large bearer token fails in browser but not in postman

When making API calls to our auth server (Keycloak, served on Wildfly) from our Angular application there is a point where requests begin to fail, apparently due to too much data being present in the bearer token. I have isolated this to the point…
0
votes
1 answer

How is the id generated for USER_ENTITY and USER_ATTRIBUTE table in Keycloak DB?

I am new to the Hibernate, and trying to understand how the Primary Key for USER_ENTITY and USER_ATTRIBUTE is generated. When I run the Keycloak server in DEBUG mode I could see the ID is being passed to the…
0
votes
1 answer

Get 400 with message unknown_error for any POST to Keycloak REST Api

I want, for example, create a new client with admin user using admin-cli client. The token generation works fine: POST /auth/realms/master/protocol/openid-connect/token b'username=admin&password=admin&grant_type=password&client_id=admin-cli' Using…
xbmono
  • 2,084
  • 2
  • 30
  • 50
0
votes
0 answers

Execution of kcadm command on keycloak

i'm getting error when i'm executiong this commande : kcadm create components -r master -s name=java-keystore -s providerId=java-keystore -s providerType=org.keycloak.keys.KeyProvider -s "config.priority=[\"101\"]" -s "config.enabled=[\"true\"]" -s…
steve.vai
  • 49
  • 1
  • 6
0
votes
0 answers

Keycloak provider setup

I'm trying to connect via any provider, mainly facebook, using keycloak on a flutter application. The things that I didfor now are: Made an app with facebook api and got a client id and secret. (I don't know if I did that correctly though)…
0
votes
1 answer

Keycloak client baseurl is not accepting url without http

I am developing react app. And keeping keycloak for signup. After completing signup keycloak is triggering an email for email verification. When the user verify I want to redirect that verified user to this url e.g. com.abcd.xyzApp/(My app). But I…
0
votes
1 answer

Modelling user created Resource-level permissions in keycloak

This is more of an early stage question around idiomatic approaches for modelling permissions/roles for user created resources in Keycloak. For this use case I'm not sure if I should just use Keycloak for identity management and leave access…
0
votes
0 answers

Generate user attribute mail with first and last name field

i couldn't find a solution in the keycloak docu or with the search function. I have a keycloak server with imported useres from ldap. unfortunately they don't have a value for the email field. Now i try to generate a custom user attribute where i…
Senua
  • 65
  • 5
0
votes
1 answer

Keycloak 12, REST API (from JS) gives CORS

I am trying to get user credentials (to see OPT configuration) from Angular app. I am trying to call one of 2 API…
Filip Witkowski
  • 795
  • 3
  • 14
  • 24
0
votes
1 answer

How to add user attribute values to token when impersonating in Keycloak

I am trying to impersonate a user (tony123) using a superadmin(superadmin). The steps I am following are as follows. Get access token for superadmin as below. curl --location --request POST…