[keycloak-user] how to get user password from keycloak?

[Stian Thorgersen]

----- Original Message -----
> From: "Bill Burke" <bburke at redhat.com>
> To: keycloak-user at lists.jboss.org
> Sent: Wednesday, 10 September, 2014 2:39:23 PM
> Subject: Re: [keycloak-user] how to get user password from keycloak?
> 
> For security reasons you can not obtain a password from our remote APIs.
>   We also do not store passwords directly, they are hashed, also for
> security reasons.
> 
> I think you've pinpointed yet another entry point where we need an SPI
> to intercept a specific event.

Couldn't the UserFederationProvider be used in this case?

Alternatively, we could add to the Event SPI to make it possible to retrieve the password when a user is registered or updates the password.

> 
> On 9/10/2014 8:27 AM, Christina Lau wrote:
> > I am trying to extend the keycloak new user registration path so that
> > when a new user is registered to keycloak, it will automatically
> > registered to another third party system with the same user name and
> > password. How can I obtain the user password from keycloak? Is that
> > possible? I tried the rest api
> > (http://localhost:8080/auth/realms/{realm}/account/password) already and
> > it returns the a html stream. Thx.
> >
> > Christina
> >
> >
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> 
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>