[keycloak-user] Forgot Password Flow And Cookies

Kenyatta Clark kclark at mbopartners.com
Wed Sep 12 00:18:06 EDT 2018


When a user is uses the forgot password and resets their password and there is a clientId then they are redirected to the appropriate client only when they initiate the forgot password and complete the reset password in the same browser.  We have noticed that Keycloak does not honor the clientId request parameter when the KC_RESTART token is not present (for example the user initiated the forgot password in one browser and completes the reset in another).  Is there a work around to allow Keycloak to honor the clientId passed in even when the cookie is not present?


More information about the keycloak-user mailing list