[keycloak-user] 2FA via REST API -> server-spi-private?

[Stefan Schlesinger]

A colleague of mine pointed me to the following commit, which looks like it moved some things to a "server-spi-private”.

Could this be related?

https://issues.jboss.org/browse/KEYCLOAK-3958
https://github.com/keycloak/keycloak/commit/7e33f4a7d1cbf2b37aa2a6d5b87dfe70d57d0252

Best, Stefan.

> On 08 Jan 2017, at 11:48, Stefan Schlesinger <sts at ono.at> wrote:
> 
> Hi Thomas,
> 
> I’m trying to use the examples provided in the thread you pointed me at,
> but the last call to the validation endpoint gives me a 404.
> 
> I also tried to find documentation, but apart from the admin REST API
> and the Authorization API[1] (which covers basic usage) I couldn’t find
> anything.
> 
> My test script:
> 
> https://gist.github.com/sts/4c6f8fa759cec88197ca6dfcf306c391
> 
> Best,
> 
> Stefan.
> 
> [1] Authorization API - https://keycloak.gitbooks.io/authorization-services-guide/content/v/2.5/topics/service/authorization/authorization-api.html
> 
>> On 07 Jan 2017, at 14:31, Thomas Darimont <thomas.darimont at googlemail.com> wrote:
>> 
>> have a look at this example from the mailing list:
>> http://lists.jboss.org/pipermail/keycloak-dev/2016-November/008419.html
>> 
>> 2017-01-06 16:17 GMT+01:00 Stefan Schlesinger <sts at ono.at>:
>>> Anyone knows how to verify an OTP (TOTP) token against the Keycloak Openid REST API for clients with direct access grants enabled?
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user