Re: [keycloak-user] Forgot Password Error with Our own UserStorageProvider

What I observed is that if a user is registered with KeyCloak then I am not getting any issue in Forgot Password, but if the user is an existing one in my database and not registered thru KeyCloak, then I am getting this issue. It would be of great help if you can help me with this. On Thu, Jan 12, 2017 at 4:46 PM, Deepu Laghuvaram < deepu.laghuvaram(a)gmail.com&gt; wrote: > I am using my own DB2UserStorageProvider and my Login and Registration > are working as expected but forgot password is not working as expected > (When I remove User Federation then Forgot Password is working as > expected). > > I am having the flow for Reset Credential as > Choose User REQUIRED > Send Reset Email REQUIRED > Reset Password REQUIRED > > I used an existing user in my DB2 database, with which I am able to login > and when I try that user to reset password, I am not receiving any email > and below are the logs > > 14:40:31,755 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-14) action: reset-credentials-choose-user > 14:40:32,908 INFO [DB2UserStorageProvider] (default task-14) Inside > getUserByUsername: testmail(a)gmail.com > 14:40:32,914 INFO [DB2UserStorageProvider] (default task-14) Entity.ID = > 9bcff1bd-2ac9-4e63-b113-7061bd3f0278 > 14:40:32,914 INFO [DB2UserStorageProvider] (default task-14) > Entity.setUsername = 9bcff1bd-2ac9-4e63-b113-7061bd3f0278 > 14:40:32,942 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-14) authenticator SUCCESS: reset-credentials-choose-user > 14:40:32,942 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-14) processFlow > 14:40:32,942 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-14) check execution: reset-credential-email requirement: > REQUIRED > 14:40:32,942 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-14) authenticator: reset-credential-email > 14:40:32,949 DEBUG [org.keycloak.transaction.JtaTransactionWrapper] > (default task-14) JtaTransactionWrapper commit > 14:40:32,957 DEBUG [org.keycloak.authentication.AuthenticationProcessor] > (default task-13) AUTHENTICATE > 14:40:32,957 DEBUG [org.keycloak.authentication.AuthenticationProcessor] > (default task-13) AUTHENTICATE ONLY > 14:40:33,008 INFO [DB2UserStorageProvider] (default task-13) > getUserById: f:c3f5f5ce-6954-4e2f-82e7-1055df749be9:9bcff1bd-2ac9-4e63- > b113-7061bd3f0278 > 14:40:33,008 INFO [DB2UserStorageProvider] (default task-13) > entity.getID: 9bcff1bd-2ac9-4e63-b113-7061bd3f0278 > 14:40:33,008 INFO [DB2UserStorageProvider] (default task-13) Entity.ID = > 9bcff1bd-2ac9-4e63-b113-7061bd3f0278 > 14:40:33,008 INFO [DB2UserStorageProvider] (default task-13) > Entity.setUsername = 9bcff1bd-2ac9-4e63-b113-7061bd3f0278 > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) processFlow > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: reset-credentials-choose-user > requirement: REQUIRED > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) execution is processed > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: reset-credential-email requirement: > REQUIRED > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) authenticator: reset-credential-email > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) invoke authenticator.authenticate > *14:40:33,030 WARN [org.keycloak.events] (default task-13) > type=RESET_PASSWORD_ERROR, realmId=TestRealm, clientId=TestClient, > userId=f:c3f5f5ce-6954-4e2f-82e7-1055df749be9:9bcff1bd-2ac9-4e63-b113-7061bd3f0278, > ipAddress=127.0.0.1, error=invalid_email, auth_method=openid-connect, > auth_type=code, redirect_uri=http://localhost:8090/account/account.jsp > <http://localhost:8090/account/account.jsp>;, > code_id=857a3ff7-837f-4e8d-8b4d-dabd8b38a89e, username=testmail(a)gmail.com > <testmail(a)gmail.com&gt;* > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) reset browser login from authenticator: > reset-credential-email > 14:40:33,030 DEBUG [org.keycloak.authentication.AuthenticationProcessor] > (default task-13) AUTHENTICATE > 14:40:33,030 DEBUG [org.keycloak.authentication.AuthenticationProcessor] > (default task-13) AUTHENTICATE ONLY > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) processFlow > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: auth-cookie requirement: ALTERNATIVE > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) authenticator: auth-cookie > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) invoke authenticator.authenticate > 14:40:33,030 DEBUG [org.keycloak.services.managers.AuthenticationManager] > (default task-13) Could not find cookie: KEYCLOAK_IDENTITY > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) authenticator ATTEMPTED: auth-cookie > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: auth-spnego requirement: DISABLED > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) execution is processed > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: identity-provider-redirector > requirement: ALTERNATIVE > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) authenticator: identity-provider-redirector > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) invoke authenticator.authenticate > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) authenticator ATTEMPTED: identity-provider-redirector > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: null requirement: ALTERNATIVE > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) execution is flow > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) processFlow > 14:40:33,030 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) check execution: auth-username-password-form requirement: > REQUIRED > 14:40:33,031 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) authenticator: auth-username-password-form > 14:40:33,031 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] > (default task-13) invoke authenticator.authenticate > > > It looks like the user is not in context, I am not sure why the user is > not in context as both getUserByUsername and getUserById are successful and > even it says "authenticator SUCCESS: reset-credentials-choose-user". > Could you please help me with this issue, I am using Keycloak 2.3.0 Final. > > Thanks, > Deepu > > >