<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 8/9/16 5:56 AM, Tom Pearson wrote:<br>
</div>
<blockquote
cite="mid:CALHbiG+cgQp=hB399HM5SYE+zrNi1EzUTm6jsoo-aQJdu1Vw8w@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I'm creating a new user through the admin API. In order to
do this I have to make 3 separate calls (<a
moz-do-not-send="true"
href="http://www.keycloak.org/docs/rest-api/index.html#_create_a_new_user">createUser</a>, <a
moz-do-not-send="true"
href="http://www.keycloak.org/docs/rest-api/index.html#_set_up_a_temporary_password_for_the_user">resetPassword</a> and <a
moz-do-not-send="true"
href="http://www.keycloak.org/docs/rest-api/index.html#_add_realm_level_role_mappings_to_the_user_2">addRealmLevelRoles</a>)
as the credentials and realm roles in the <a
moz-do-not-send="true"
href="http://www.keycloak.org/docs/rest-api/index.html#_userrepresentation">UserRepresentation</a> are
ignored. I then have to make another call to <a
moz-do-not-send="true"
href="http://www.keycloak.org/docs/rest-api/index.html#_get_effective_realm_level_role_mappings_2">getEffectiveRealmLevelRoles</a> as
the <a moz-do-not-send="true"
href="http://www.keycloak.org/docs/rest-api/index.html#_get_represenation_of_the_user">getUser</a> method
doesn't return the roles. If I were to require the client
level roles this would be 6 calls to create and return the
user. </div>
<div><br>
</div>
<div>Is there a reason as to why this is the case? </div>
<div><br>
</div>
</div>
</blockquote>
The reason is simply that the admin API was written for the admin
console. We've never had time to refactor it. Too many other
things on the queue.<br>
<br>
<blockquote
cite="mid:CALHbiG+cgQp=hB399HM5SYE+zrNi1EzUTm6jsoo-aQJdu1Vw8w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>As an aside, in the docs the reset password method is
called "Set up a temporary password for the user" but in my
experience the password is never temporary regardless of the
value of the temporary flag. </div>
<div><br>
</div>
<div>Kind regards,</div>
<div>Tom</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>