Just to add, the keycloak has a log message of 08:06:20,217 WARN [org.keycloak.events] (default task-1) type=LOGIN_ERROR, realmId=master, clientId=bikes-app, userId=null, ipAddress=192.168.0.5, error=invalid_client_credentials, grant_type=password Not sure why userid is null when the curl command uses "username" (which does work from the server)

Hi Sebastien, What do you mean by confidential client - client as in curl? Client as in the client within keycloak? If latter, then should look to the client details within keycloak admin? John Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: Sebastien Blanc <sblanc(a)redhat.com&gt; Sent: Monday, November 25, 2019 10:05:28 AM To: John Norris <johnnorris-10(a)outlook.com&gt; Cc: keycloak-user(a)lists.jboss.org <keycloak-user(a)lists.jboss.org&gt; Subject: Re: [keycloak-user] getting keycloak token with curl from PC The error "unauthorized_client" seems to indicate that you are using a confidential client and you didn't provide any credentials for it. Not sure why it was working for you on the server directly. On Mon, Nov 25, 2019 at 9:37 AM John Norris <johnnorris-10@outlook.com<mailto:johnnorris-10@outlook.com>> wrote: Hello, I have keycloak running on a linux server along with a web application. Using a browser from a PC, I get redirected to the keycloak login page where I can authorise a user and so get access to protected resource. I can also use curl on the command line on the server to get back and display the token. But what I can not do is use curl on the PC (or Postman which I used initially) to get the token. I run the same curl command (except for using double quotes for the body on the PC) but on the PC I get curl -s -X POST -H 'Content-Type: application/x-www-form-urlencoded' -d "username=user1&grant_type=password&client_id=bikes-app&password=123456" http://mint191:8080/auth/realms/master/protocol/openid-connect/token {"error":"unauthorized_client","error_description":"INVALID_CREDENTIALS: Invalid client credentials"} So why would a locally run curl work but a remotely run curl fail when the browser works? Regards, John _______________________________________________ keycloak-user mailing list keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user