Re: [keycloak-user] Login to Keycloak using API and create KeycloakPrincipal object

I actually had a similar question for our register user workflow. We are registering users on our site using our own custom registration form; in this flow we use the Admin client to create the user in keycloak. Since the user just gave us their un/pw it doesn’t make sense for us to send them over to Keycloak to login, but rather we would like to passively log them in either via the backend or via some ajax call. I know I can get a token if I do something like this, but I’m not sure if it’s going to drop all the right cookies back to the user’s browser to consider them logged in across all the clients: curl -d "client_id=admin-cli" -d &quot;username=chris.savory(a)edlogics.com&quot; -d "password=password" -d "grant_type=password" "<domain>/auth/realms/<realm>/protocol/openid-connect/token" -- On 10/10/16, 3:23 AM, &quot;keycloak-user-bounces(a)lists.jboss.org on behalf of Stian Thorgersen" <keycloak-user-bounces(a)lists.jboss.org on behalf of sthorger(a)redhat.com&gt; wrote: By using token directly I assume you mean exchanging username/password for a token directly. I'd strongly recommend against this and it's not something our adapters support directly. On 4 October 2016 at 15:36, Mariusz Chruscielewski - Info.nl < mariusz(a)info.nl&gt; wrote: _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user