Category "keycloak"

c# OpenIdConnect authentication

I'm trying to secure an API with keycloack. The API is called by a server. So there is no browser. (Logging in via Browser works fine and i can access the api.)

Use ldap attribute for role-ldap-mapper role name

I'm trying to sync my roles from my LDAP to keycloak. As i have objects in my Domain that share the name of my needed roles i can't use the cn as "Role Name LDA

How to verify a keycloak kcToken and kcIdToken fetched from browser's cookies after @react-keycloak/ssr login?

I am trying to secure NextJS API endpoints with keycloak. Keycloak authentication is already implemented on the front-end pages. The user is forced to sign in b

How to permit child pages from root only

I have a Spring Boot Vaadin web app with Spring Security and keycloak-spring-security-adapter. This works fine on the root page. From the root page I can access

Issue with Keycloak and Cloudflare

I'm running a web site and I secured it with Keycloak, with running Cloudflare as well. All the login forms, registration forms etc. are used by Keycloak, so I

Keycloak - React.js cannot call API

I have a simple React.js application. I want to test if it can call an endpoint from my API. Both my API and React.js application are using Keycloak for Authent

OAuth 2.0 flow using Keycloak with a back-end and front-end?

I'm working on a project that consists of: A back-end in Java (JEE project deployed on Wildfly) Front-end developed in Angular Keycloak for authorization and au

How to get an auth code from Keycloak(OAuth2 standard flow) in a JEE-Maven project?

I need to secure a web-app, the backend will be Java Rest API, meanwhile I'll use Angular for my front. I am using Keycloak to authenticate into my webapp, but

Keycloak 2fa via SMS using external REST Api

I have been trying to implement 2fa using OTP. Till now i am successful doing it via browser flow using keycloak interface to login. Keycloak provides an API to

Why does machine-to-machine interaction in OAuth2 disallow the refresh_token grant without providing the client_secret?

We are implementing JWT-based authentication for our APIs, using Keycloak as an identity provider and token endpoint. We found the idea of OAuth2 attractive, as

How to get group and group attributes in Keycloak

I am using Spring Boot, Bitnami/Keycloak:latest, java 11. I want to get the group and group attributes before the request reaches the controller because I need

Access token missing from Keycloak context

I am trying to make an authenticated request from postman to my node, apollo, express backend. I am gettting an error saying that the user is unauthenticated. W

Check user group of already logged in user in KeyCloak

I have two application, both are using keycloak to authenticate user of the same realm. I've created two different client, and two different user group. Only us

Keycloak to Flutter Android App Redirect Issue : HTTP is working, HTTPS is giving error

I have implemented flutter_appauth and I am using Keycloak as Authentication Server. Code snippets are as follows: Main.dart final String _clientId = 'flutter-d

Keycloak login based Authorization and authentication of application user

I am new to keycloak , whether the user creation should be happened in my application or at keycloak

KeyCloak Mixed Configuration Issue with AWS ECS and ALB

I am struggeling with a "smalL" problem during my ECS configuration. I have the following Infrastructure ECS Fargate (Serverless) Service which deploys 2 contai

Is it possible to create keycloak policy enforcer resources with same url?

I want to use keycloak policy enforcer to authorize requests for resources of my app. But, some resources need to have same urls. In example, there are two role

Can't fetch user info from Keycloak using Python on docker compose

I need to run, from docker compose, three containers: a fastapi server, a keycloack server and a postgres database. This works well if I run the uvicorn command

How to avoid "timeout when waiting for 3rd party check iframe message" with Keycloak and Angular

I'm trying to securize an Angular app with a Keycloak server. I've followed some tutorials that give more or less the same instructions in order to do so, but I

How to fix "The required mechanism 'SSO' is not available in mechanisms [BASIC, CLIENT_CERT, DIGEST, FORM] from the HttpAuthenticationFactory." error?

Issue Description: I'm upgrading the base Keycloak image for our customized Keycloak image. I've got it working locally and if i disable the single-sign-on subs