[keycloak-user] Manage Keycloak token inside of the client applications.

Scott Rossillo srossillo at smartling.com
Mon Jan 11 13:40:18 EST 2016


We have an open PR for early token refresh but it’s missing integration tests, thus not yet merged.

https://github.com/keycloak/keycloak/pull/1796

> On Jan 11, 2016, at 4:23 AM, ha.hamed at gmail.com <hamed at web-presence-in-china.com> wrote:
> 
> Hi,
> I made an app use bearer authentication with Keycloak . I have another app which wants to use this REST api.
> As I know until now, It needs to get token from Keycloak server (I use POST method), then add this token to the request It needs to send.
> 
> But, there's one important issue. This client want to have assess hundreds time each minute. Is there any tools for Keycloak to help me update the token when it's required? I mean keep the token for example for 15 minutes (validation time) then renew it when it's required. I made a statefull class which get configuration and has getToken() method. Then when the other classes ask for new token, if it expired this method synchronously will get new one and return it (Direct grant). Is it right? Is there anything standard inside of the Keycloak lib already?
> 
> Best regards,
> Hamed
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user




More information about the keycloak-user mailing list