Hello Wyllys,
Yes this is possible. You want to use the REST API endpoint to send an email to the user
requiring them to perform some action.
See the section called "Send a update account email to the user An email contains a
link the user can click to perform a set of required actions." in the Keycloak REST
admin api docs (
https://www.keycloak.org/docs-api/4.5/rest-api/index.html)
PUT /{realm}/users/{id}/execute-actions-email
The body of the request specifies the actions you want them to perform. I think you will
want to send the following, which will force the user to reset their password, as well as
send them an email with a link to do so: ["VERIFY_EMAIL",
"UPDATE_PASSWORD "]
Here are a few other links that might help:
http://lists.jboss.org/pipermail/keycloak-user/2016-December/008766.html
https://stackoverflow.com/questions/42071682/how-to-update-password-via-k...
This section of the keycloak server admin guide describes what the various required action
options are:
https://www.keycloak.org/docs/latest/server_admin/index.html#required-act...
Since the keycloak admin web console uses the REST api, it can be handy to turn on
developer tools in your browser and watch the network traffic that occurs when you perform
the equivalent action in the keycloak admin console to the REST api calls the console
makes to the server and the exact parameters it passes.
Hope that helps,
Don
-----Original Message-----
From: keycloak-user-bounces(a)lists.jboss.org <keycloak-user-
bounces(a)lists.jboss.org> On Behalf Of Wyllys Ingersoll
Sent: Thursday, October 18, 2018 12:04 PM
To: keycloak-user(a)lists.jboss.org
Subject: [keycloak-user] password reset email REST api?
Is there ( or are they plans to add one) a REST API endpoint for sending a
user a password reset email link?
Im looking for a way to simulate what happens when the "reset password"
form is used but without using the form itself, so that an application could
make the request without requiring a UI.
This is different from having an administrator manually reset a password, I
want the user to just get a secure link to reset their own password when
necessary.
thanks,
Wyllys Ingersoll
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user