Questions tagged [keycloak]
Integrated Single Sign On (SSO) and Identity Manager (IDM) for browser apps and RESTful web services. Built on top of JBoss / Wildfly, it complies with OAuth 2.0, Open ID Connect, (OIDC) JSON Web Token (JWT) and SAML 2.0 specifications.
5,775
questions
0
votes
0
answers
6
views
Getting "Unexpected Error " while redirecting the the actual page after authenticating the user with Identity Provider
I have used Google has my identity provider in Keycloak application, I have created the identity provider by using the keycloak oidc and Google is showing up as sign in option on my console when i ...
0
votes
0
answers
8
views
Keycloak - sharing OAUTH2 tokens across clustered keycloak servers
I am running two keycloak servers in standalone clustered mode. Both have the same configuration (the docker images are identical). These are configured to share an ldap and db server. I have ...
0
votes
0
answers
8
views
Keycloak API not actually searching users for realm
Trying to call the keycloak API to query users and getting mixed results. If I query the Master realm I can get all users and search for a user using username=foo but if I try and do the same thing ...
0
votes
1
answer
23
views
vue nuxt TypeError: Cannot read properties of undefined (reading 'mounted')
I'm trying to make auth using keycloak + vue nuxt using this https://tliebrand.com/19-programming/26-how-to-authorize-nuxt-against-keycloak
When I try to login it fails with this error:
TypeError: ...
0
votes
0
answers
11
views
How can I resolve python flask oicd error
I am having an issue I cant seem to resolve. I have a flask app that uses flask_oidc to authenticate users to keycloak.
Everything works fine until I restart the app then on login I get a 500 error ...
1
vote
1
answer
13
views
Deploying Keycloak in production: Cannot set quarkus.http.redirect-insecure-requests without enabling SSL
For already few hours I am struggling with getting Keycloak in production mode to work. When I try to run Keycloak in production, I get the next error:
keycloak | 2022-05-25 16:32:43,094 INFO [org....
0
votes
0
answers
25
views
access token given by keycloakjs is invalid to use for keycloak API
I am using keycloak server version 10.0.2 and keycloak js version 10.0.2. I have newly created a client under my realm, and access type as Public, and referred to this link Keycloak JavaScript API to ...
0
votes
0
answers
14
views
How to set database migration strategy to manual in Keycloak 18
According to the Keycloak Docs - Upgrading section (Upgrading), using --spi-connections-jpa-default-migration-strategy=manual would write all the necessary queries needed for database migration to a ...
0
votes
0
answers
14
views
How to troubleshoot AWS OpenSearch Dashboard Internal Server Error
After integration SAML (Keycloak) with AWS OpenSearch, getting error:
{"statusCode":500,"error":"Internal Server Error","message":"Internal Error"}...
0
votes
1
answer
14
views
Problem loading login page Reactjs - Keycloak - Spring Cloud Gateway
Hello this is my first post so apologies for any mistakes being made.. :)
I have been trying to integrate React with Keycloak & Spring Cloud Gateway trying to access another Spring Boot ...
1
vote
0
answers
24
views
How to implement project based authorization for different application
We are using auth0 for authentication and also for simple authorization.
We would like to extend our permission system to allow us to assign certain rights for different applications per project.
...
0
votes
0
answers
28
views
ERROR [org.keycloak.services] : Failed to send email: javax.mail.AuthenticationFailedException: 421 4.7.66 TLS 1.0 and 1.1 are not supported
I am having keycloak running on docker container version 15.0.2 , Java version 1.8.0_181
OS - Windows server 2016 10.0
ERROR [org.keycloak.services] (default task-2) KC-SERVICES0029: Failed to send ...
0
votes
1
answer
17
views
Add protocol mapper to client via keycloak REST API
By the latest Keycloak's REST API documentation https://www.keycloak.org/docs-api/18.0/rest-api/index.html#_protocol_mappers_resource, I can't find enough information to add a new protocol mapping ...
0
votes
0
answers
11
views
Keycloak NullPointerException in DefaultHostnameProvider when authenticating
I'm stucking in this quite some weeks and I hope you can give me some hints.
I have a Docker-infrastructure where I have a backend in a container and keycloak (18.0.0 / latest version) running in ...
0
votes
0
answers
11
views
KeyCloak: remove "user_required_action" via database query
I am trying something dirty on keycloak. I have a realm level 90 days password expiry for user credentials, but I am trying to find an way to go around that for a few users of my choosing (my own ...
0
votes
0
answers
5
views
KeyCloak POST user with federationLink
I'm trying to make a POST request to our KeyCloak.
I can create a user with no problem but once i provide the post request with the federationLink this isn't picked up. I tried it both with the ID and ...
0
votes
0
answers
22
views
How to mock with keycloak/ssr in react + next
I need to help with my project
I need to test my component but I need help
I need mock to check if it authenticates or not
Mycode
<Wrapper>
<button
data-testid="btn-login-keycloack&...
0
votes
0
answers
18
views
Keycloak with 10 million realms
We are on latest keycloak version with Quarkus distribution. We have a usecase where we will need to create about 10 million realms. Each realm would have limited set of client/groups/users/roles/idps....
0
votes
0
answers
20
views
How to add multi-tenancy using Next Auth and Keycloak provider
I've been trying to use next-auth and keycloak together, but I'm falling when using multi-realms login, using a single keycloak provider I couldn't change clientSecret and issuer options at runtime, ...
0
votes
0
answers
12
views
nullPointerException after deleting realm VIA admin console in keycloak
So I was working on the keycloak server that the company I work for uses for user authentication. While logged into the admin console I decided to delete a realm VIA the client page for the Master ...
-1
votes
0
answers
20
views
What Callback_URL should do in OAuth2?
I have a Vue app, a backend part on Python, and other utils in a K8s cluster. I want to create an SSO for them. I deployed Keycloak and oauth2-proxy. And when I navigate to the Vue app, Keycloak and ...
0
votes
0
answers
20
views
Keycloak : Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource [duplicate]
I am using keycloakjs version 10.0.2 and my keycloak server is of version 10.0.2, I am not able to authorize user in keycloakjs, browser console gets the following error,I tried configuring keycloak ...
-1
votes
0
answers
13
views
Keycloak + SAML + JavaScript = CORS Policy Error for No Access-Control-Allow-Origin [duplicate]
There appears to be no way to edit the Cross Origin Request Sharing (CORS) settings for Keycloak Server when SAML is used. If I was using Keycloak with OpenID Connect (OIDC), I could add my server to ...
1
vote
0
answers
26
views
Spring Keycloak Adapter sometimes returns with "Token is not active" when uploading files
lately we are facing an issue that our Spring Boot backend service (stateless REST service) SOMETIMES returns an HTTP 401 (Unauthorized) error when users try to upload files >70 MB (or in other ...
0
votes
0
answers
12
views
Keycloak Auth OTP SMS SPI: How to set a non form challenge
I am using a keycloak auth Spi with sms auth which works finde for browser flow.
My requirement is to use it with direct access grant. Therefor I have to create a formless challenge which conntext the ...
0
votes
1
answer
18
views
Keycloak throws an error when retrieving user credentials
I am using keycloakjs version 10.0.2 and my keycloak server is of version 10.0.2, I am not able to authorize user in keycloakjs, browser console gets the following error, Please give me some idea on ...
0
votes
0
answers
19
views
Is it possible to sync roles and permissions from LDAP to Keycloak?
I'm have been setting up Keycloak in an test environment as an IdP, with a user federation to Microsoft Active directory LDAP.
I've been able to sync the roles with ldap-mapper and I can see the roles ...
0
votes
0
answers
18
views
Cannot Access Service Endpoint After Logging In KeyCloak
I am using python-keycloak library to authenticate a service secured behind keycloak authentication. There is also a web browser app that uses the same service and is functional and has no issue ...
0
votes
0
answers
11
views
How to get the users who are not associated with any Identity Providers in Keycloak
I'm able to get the users who are associated with Identity provider in keycloak, using endpoint <keycloak_base_url>/auth/admin/realms/<realm_name>/users?idpAlias=<...
0
votes
0
answers
19
views
Keycloak integration with SpringDoc and spring boot
App stack: Spring boot / Spring Doc / Keycloak
I am trying to integrate the above stack together, everything works well till I am using keycloak policy enforcement.
At the bringing the app is running ...
0
votes
0
answers
13
views
Authorisation design using policies/permission using keycloak or in general
I'm quite new to the entire auth design and am still trying to understand how to use keycloak for authentication and authorisation.
Currently from what I understand in order to have authorisation ...
0
votes
0
answers
10
views
KeyCloak - Token obtained by Javascript adapter can't be used for authorizing
Keycloak 17.0.1
I have 2 tokens, one obtained via the JavaScript adapter and the other via java adapter. They are pretty much the same through jwt.io (same aud, azp...). I see the most significant ...
0
votes
0
answers
19
views
Oauth2 and user (not) logout
We have a setup with 3 components
A Dashboard/Portal for the user to manage things
A Moodle instance for elearning courses
A Keycloak server for SSO
When the user accesses the portal, it is ...
0
votes
0
answers
12
views
How to secure a mobile App with sms otp and keycloak?
I have the requirement to secure a flutter mobile App with SMS otp as 2FA.
We use keycloak as auth server and oidc.
I already created a Sms auth spi that implements the flow for Browser flow. Is it ...
0
votes
0
answers
29
views
Error 403 Forbidden when retreiving data from secured backend API with Keycloak
I’ve got a JEE-Wildfly project configurated with Keycloak. The client has access type ‘confidential’, I’ve ceated two roles(user-admin) and created a user mapped with both roles.
So my goal is to ...
1
vote
0
answers
19
views
Keycloak and Django 4 (DRF)
everyone!
This is the last hope to understand how django and keycloak works together?
The main problem is:
I read a lot of documentation about authorization through jwt-token, I know everything what ...
1
vote
0
answers
29
views
JWT Bearer Token flow in keycloak
Does keycloak support
'grant_type': 'urn:ietf:params:oauth:grant-type:jwt-bearer'?
In my tests I receive status: 400 and msg
{'error': 'unsupported_grant_type', 'error_description': 'Unsupported ...
0
votes
1
answer
44
views
Keycloak 18.0.0 Installation - Java error
I would like to install Keycloak on a Windows 10 machine.
The installation guide can be found here:
https://www.keycloak.org/getting-started/getting-started-zip
After I have unzipped the file an run ...
0
votes
0
answers
13
views
Keycloak auth with Spring boot and standalone SPA application
I am relatively new to Spring boot and OAuth so, I would like to know which is the valid way to implement SSO with keycloak in between different applications running inside an intranet. The main ...
0
votes
0
answers
25
views
Keycloak with Outlook SMTP Server Failed to send email
I have keycloak on an Azure Virtual Machine, and until a few weeks ago everything went normal, but for some storage problems I had to restart the server. After that, I can't test the SMTP connection ...
0
votes
1
answer
27
views
How to secure REST API of my JEE project with Keycloak?
I am working on a project which has a front-end (Angular) and REST API back-end(JEE-Wildfly).
My goal is to secure my REST endpoints.
I've created 2 clients in Keycloak:
backend-client, which has ...
0
votes
0
answers
25
views
Keycloak 18 with Quarkus as Windows Service
With Wildfly as an application server, it was possible to run KeyCloak as a service on a Windows Server as follows (for example behind an IIS):
.\service.bat install /name keycloak /display Keycloak /...
-2
votes
0
answers
23
views
Spring boot and keycloak SSO inside intranet with different services [closed]
I am relatively new to Spring boot and OAuth so, I would like to know which is the valid way to implement SSO with keycloak in between different applications running inside an intranet. The main ...
0
votes
0
answers
35
views
Keycloak SAML CORS Policy Error for No Access-Control-Allow-Origin [closed]
I'm using NodeJS and passport-saml with Keycloak Identity Provider (IdP) with each running on separate servers. When the front end calls my NodeJS login endpoint, passport.authenticate() is called, ...
0
votes
0
answers
20
views
Keycloak production setup blank screen issue
I am trying to setup keycloak, I downloaded the keycloak from this URL: https://www.keycloak.org/downloads (Distribution powered by Quarkus). It runs fine when I run it on dev mode with following ...
0
votes
0
answers
17
views
User roles not mapped to group in keycloak
I have a feature where I am supposed to assign a particular role to a group. Result is such that all the members of the group should be mapped to the role. However the roles dashboard doesn't reflect ...
0
votes
2
answers
37
views
Keycloak 18 - SQLException: Can not call getNString() when field's charset isn't UTF-8
I have migrated keycloak from version 9.0.0 to 18.0.0 and when I try to invoke the endpoint /auth/admin/realms/:realmName/users an SQLException is thrown as below;
[2022-05-18 11:13:04.0466], DEBUG, ...
-2
votes
0
answers
38
views
+50
How to add or access a keycloak user in client application project without the first login?
My Use case is as follows:
My Client application for Keycloak is Harbor(we can assume any other application as well here) which I have integrated with Keycloak for Single Sign On. The Keycloak users ...
0
votes
0
answers
37
views
Keycloak silent login using access token
I am trying to implement a feature where the user logs directly to our portal.
I am getting the user's access token and refresh using the admin's credentials.
I tried initiating the session in the ...
0
votes
0
answers
13
views
KeyCloak user aceess token issue
Keycloak:token issue
Token API:
http://localhost:8081/auth/realms/zyter-api/protocol/openid-connect/token
Response:
{
"error": "invalid_grant",
"error_description": "...