[keycloak-user] Implicit client login problem

Vivek Srivastav (vivsriva) vivsriva at cisco.com
Wed Jul 30 14:24:37 EDT 2014


Hi Stian,
Thanks. I got it working. A new cli client with META-INF/keycloak.json
file fixed the problem.
I manually created the realm.
Appreciate your help.
Kind Regards,
Vivek


On 7/30/14, 5:04 AM, "Stian Thorgersen" <stian at redhat.com> wrote:

>Looks like the pub-key in customer-portal-cli doesn't match the pub-key
>for the realm.
>
>Did you import the testrealm.json from the example, or manually create
>the realm?
>
>----- Original Message -----
>> From: "Vivek Srivastav (vivsriva)" <vivsriva at cisco.com>
>> To: keycloak-user at lists.jboss.org
>> Sent: Tuesday, 29 July, 2014 8:05:14 PM
>> Subject: [keycloak-user] Implicit client login problem
>> 
>> I am trying to get the customer-portal-cli to work
>> 
>> customer-portal-cli has the following configuration:
>> 
>> access type: public
>> redirect URL: http://localhost
>> 
>> Keycloak Environment:
>> 
>> 
>> 1.0-beta-3
>> 
>> The app is able to launch a browser, obtain the code, but I am getting
>> invalid token signature. Following is the jboss log:
>> 
>> 
>> 
>> 14:53:40,883 INFO [org.keycloak.services.resources.TokenService]
>> (http-/127.0.0.1:8080-8) no authorization header
>> 
>> 14:53:40,891 INFO [org.keycloak.audit] (http-/127.0.0.1:8080-8)
>> event=CODE_TO_TOKEN, realmId=bd1320b5-7601-4056-8e30-4839f5bfdf8b,
>> clientId=customer-portal-cli,
>>userId=13598dc1-61d5-42e8-a6b1-86595548b384,
>> ipAddress=127.0.0.1,
>>refresh_token_id=784df1b7-8d6e-44de-80d7-b3ce44317007,
>> code_id=d0ae1bc2-f66c-4d44-9a48-72059f5463f81406660020834,
>> token_id=8170b67d-888f-4770-a4fd-691ece674214
>> 
>> 
>> 
>> 
>> Commands:
>> 
>> login - login with desktop browser if available, otherwise do manual
>>login
>> 
>> login-manual - manual login
>> 
>> login-desktop - desktop login
>> 
>> token - show token details
>> 
>> id-token - show ID token details
>> 
>> profile - retrieve user profile
>> 
>> customers - retrieve customers listing
>> 
>> refresh - refresh token
>> 
>> exit - exit
>> 
>> 
>> 
>> 
>> $ login
>> 
>> 
>> 
>> 
>> Invalid token signature.
>> 
>> Appreciate any help.
>> 
>> Kind Regards,
>> Vivek
>> 
>> 
>> 
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user




More information about the keycloak-user mailing list