Hiya
In regard to revocation policies or the ability to revoke access tokens.
Does keycloak only provide this feature as a push model? ... Glancing at
documentation and a quick google the implementation seems to be a back
channel callback to the url with I guess some verifiable payload? .. Is
there any other means to request this information .. I can't see anything
in the rest api but essentially I'd like periodically check if any tokens
has been revoked.
Rohith
Show replies by date