Re: [keycloak-user] Need guidance on auto login feature
If you add the header X-Requested-With: XMLHttpRequest then Keycloak will switch into
beaer-only mode and not direct these XMLHTTPRequests to the login page when your token
expires, instead it will return a HTTP 401 response.
You may need to add autoDetectBearerOnly="true" to your keycloak application
config json file too as well.
-----Original Message-----
From: keycloak-user-bounces(a)lists.jboss.org [mailto:keycloak-user-bounces@lists.jboss.org]
On Behalf Of Khyati Kataria
Sent: 08 April 2019 15:13
To: keycloak-user(a)lists.jboss.org
Subject: [keycloak-user] Need guidance on auto login feature
Hi,
I would like to get some guidance on following scenario.
I have a requirement to skip keycloak login page by setting up header using bearer token.
Is this a right approach ? or is there any way I can skip login page and be able to logged
in customer service console
Scenario:
1) create bearer token invoking:
POST to http://<server>/auth/realms/test/protocol/openid-connect/token/
with post data:
grant_type=password&client_id=client&username=admin&password=admin1
read the token from response
2) do a get using new XMLHttpRequest() and setting the header xhr.open("GET",
"http://<server>/csc/", true);
xhr.setRequestHeader('Authorization', 'Bearer ' + token);
after doing this we can see on network traces that it actually bring the subscribed ID
page but with this we do only a "static" get, and we see all cookies are set
3) finally from page we do a redirect to http://server/csc so browser really opens the
portal (and not just get the content), but at this stage we get redirected to Keycloak
login form
I don't want redirect to login form, I need guidance on this. Is this possible to have
auto login ? or anyway we can skip login page ?
Regards,
Khyati
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
________________________________
Please consider the environment: Think before you print!
This message has been scanned for malware by Websense. www.websense.com