Re: [keycloak-user] Redirect to keycloak only for certain content-types

  Hi, Yes, it can be done with nginx, but I still hope this could be accomplished natively :) The general idea is this:  a) if browser asks for "text/html" => act as confidential/public client, that is  start keycloak login protocol b) if browser asks for "application/json” => act as bearer only client, and in case of authorization error, respond with proper 40x status This would let me build an ‘isomorphic’ JavaScript application (http://isomorphic.net) With keycloak-1.5.0 I see that there is no difference whether I accept text/html or application/json: tair$ curl -v -H 'Accept: text/html' http://localhost:9080/hello-world/rest/something *   Trying ::1... * connect to ::1 port 9080 failed: Connection refused *   Trying 127.0.0.1... * Connected to localhost (127.0.0.1) port 9080 (#0) < HTTP/1.1 302 Found < Expires: 0 < Cache-Control: no-cache, no-store, must-revalidate < X-Powered-By: Undertow/1 < Set-Cookie: OAuth_Token_Request_State=72/c51bad76-7236-486e-aae6-9ec58c725666 < Server: WildFly/9 < Pragma: no-cache < Location: http://localhost:8080/auth/realms/demo/protocol/openid-connect/auth?respo... < Date: Fri, 02 Oct 2015 15:53:32 GMT < Connection: keep-alive < Content-Length: 0 < * Connection #0 to host localhost left intact tair$ curl -v -H 'Accept: application/json' http://localhost:9080/hello-world/rest/something *   Trying 127.0.0.1... * Connected to localhost (127.0.0.1) port 9080 (#0) < HTTP/1.1 302 Found < Expires: 0 < Cache-Control: no-cache, no-store, must-revalidate < X-Powered-By: Undertow/1 < Set-Cookie: OAuth_Token_Request_State=73/a8f13860-a35c-455a-9963-434c17e00a65 < Server: WildFly/9 < Pragma: no-cache < Location: http://localhost:8080/auth/realms/demo/protocol/openid-connect/auth?respo... < Date: Fri, 02 Oct 2015 15:53:41 GMT < Connection: keep-alive < Content-Length: 0 < * Connection #0 to host localhost left intact Any workarounds there? -- Tair Sabirgaliev Bee Software, LLP On October 2, 2015 at 20:54:01, Giriraj Sharma (giriraj.sharma27@gmail.com(mailto:giriraj.sharma27@gmail.com)) wrote: