Hello Tom,

I was also bitten by this a bit... I created [0] and already issued a PR [1] that allows 

creating a user with initial realm / client roles with a single request.

Cheers,

Thomas

[0] https://issues.jboss.org/browse/KEYCLOAK-3410 

[1] https://github.com/keycloak/keycloak/pull/3120

2016-08-09 15:20 GMT+02:00 Tom Pearson <tpearson@bkool.com>:

Ok cheers, will do when I get a sec

2016-08-09 15:16 GMT+02:00 Bill Burke <bburke@redhat.com>:

You can send PRs to admin docs if you want.  admin REST API is here:

https://github.com/keycloak/server_development_guide

On 8/9/16 9:14 AM, Tom Pearson wrote:

Okay, understood. Would be great if the admin docs could be updated to reflect the implementation although I appreciate you probably have more important matter to attend to. 

2016-08-09 14:31 GMT+02:00 Bill Burke <bburke@redhat.com>:

On 8/9/16 5:56 AM, Tom Pearson wrote:

Hi,

I'm creating a new user through the admin API. In order to do this I have to make 3 separate calls (createUser, resetPassword and addRealmLevelRoles) as the credentials and realm roles in the UserRepresentation are ignored. I then have to make another call to getEffectiveRealmLevelRoles as the getUser method doesn't return the roles. If I were to require the client level roles this would be 6 calls to create and return the user. 

Is there a reason as to why this is the case? 

The reason is simply that the admin API was written for the admin console.  We've never had time to refactor it.  Too many other things on the queue.

As an aside, in the docs the reset password method is called "Set up a temporary password for the user" but in my experience the password is never temporary regardless of the value of the temporary flag. 

Kind regards,

Tom

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user

_______________________________________________ keycloak-user mailing list keycloak-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user