Hello,
I'm building a REST based API for users to access things on our server.
The Keycloak browser based authentication workflow is great, and I'd like to offer
something similar to someone writing a REST client.
i.e.:
1) POST your username and password to the Keycloak server
2) Receive a authorization_code back from Keycloak
3) Call OUR REST endpoint with the Keycloak authorization_code
4) Our software does a "back channel" call to Keycloak server to exchange the
authorization_code for access token.
5) We then reply to the user with the JIT as a unique token for access our REST API
This is super easy using the browser to visit the Keycloak login page (the standard
workflow covers steps 1-3 above).
How can I configure Keycloak to allow the same flow without a browser?
Thank You!
--
Noah