Well the adapter works with bearer only , what is the error that you are getting ? Le ven. 3 mars 2017 à 21:26, Saransh Kumar <skm.8896(a)gmail.com&gt; a écrit : > Hii Sebastien, > > Actually, the node js kc adapter is not working with bearer auth only. > So, I need to verify the access token myself with keycloak in node js > without using node js adapter or any other adapters. > Please help me out in this way. > > Thanks in advance. > Saransh > > On Sat, Mar 4, 2017 at 12:06 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; > wrote: > > > > On Fri, Mar 3, 2017 at 7:04 PM, Saransh Kumar <skm.8896(a)gmail.com&gt; wrote: > > Hello all, > > I have a REST API in express node js. > I want to secure it with keycloak bearer auth only. > So, a keycloak token would be recieved in the Authorization header of the > GET request to the REST API. > I have to verify the token with keycloak *without using any adapters.* > Please help me out in the process. > > Are you not allowed to add any extra packages ? Just lookup the source > code of the nodejs kc adapter and paste it into your app ;) > > > > Thanks in advance > Saransh > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > > > > _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Hello Sebastien, Bruno Thanks for replying. :) Keycloak server: 2.5.1 keycloak-connect: 2.5.3 (node js adapter) Rest API on express node js which is to be secured:- var express = require('express');var router = express.Router();var app = express();var Keycloak = require('keycloak-connect');var keycloak =new Keycloak(); app.use( keycloak.middleware( { logout: '/logout', admin: '/',} )); router.get('/users',keycloak.protect(),function(req, res, next) { res.send('Reached here'); }); The response is : Error 403 Forbidden. Note: I have also included the package.json in the root folder. Thanks in advance On Sat, Mar 4, 2017 at 4:41 AM, Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: > Last time I checked, the adapter works with bearer only. If you provide > the steps to reproduce, version of keycloak server, adapter version and the > error. That would help ;) > > On Fri, Mar 3, 2017, 8:05 PM Sebastien Blanc <sblanc(a)redhat.com&gt; wrote: > >> Well the adapter works with bearer only , what is the error that you are >> getting ? >> Le ven. 3 mars 2017 à 21:26, Saransh Kumar <skm.8896(a)gmail.com&gt; a écrit >> : >> >> > Hii Sebastien, >> > >> > Actually, the node js kc adapter is not working with bearer auth only. >> > So, I need to verify the access token myself with keycloak in node js >> > without using node js adapter or any other adapters. >> > Please help me out in this way. >> > >> > Thanks in advance. >> > Saransh >> > >> > On Sat, Mar 4, 2017 at 12:06 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; >> > wrote: >> > >> > >> > >> > On Fri, Mar 3, 2017 at 7:04 PM, Saransh Kumar <skm.8896(a)gmail.com&gt; >> wrote: >> > >> > Hello all, >> > >> > I have a REST API in express node js. >> > I want to secure it with keycloak bearer auth only. >> > So, a keycloak token would be recieved in the Authorization header of >> the >> > GET request to the REST API. >> > I have to verify the token with keycloak *without using any adapters.* >> > Please help me out in the process. >> > >> > Are you not allowed to add any extra packages ? Just lookup the source >> > code of the nodejs kc adapter and paste it into your app ;) >> > >> > >> > >> > Thanks in advance >> > Saransh >> > _______________________________________________ >> > keycloak-user mailing list >> > keycloak-user(a)lists.jboss.org >> > https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >> > >> > >> > >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user > >

Hello all, *Front end * function loadData() { var url = 'http://localhost:3000/users'; var req = new XMLHttpRequest(); req.open('GET', url, true); req.setRequestHeader('Accept', 'application/json'); req.setRequestHeader('Authorization', 'Bearer ' + keycloak.token); req.onreadystatechange = function () { if (req.readyState == 4) { if (req.status == 200) { console.log('Success'); } else if (req.status == 403) { console.log('Forbidden'); } }} req.send(); } And I have downloaded keycloak.json from the Installation tab in Clients section from the keycloak admin console. At present I dont have that keycloak.json file to show you. Regards Saransh On Sat, Mar 4, 2017 at 12:46 PM, Sebastien Blanc <sblanc(a)redhat.com&gt; wrote: > Can you also show us your keycloak.json and show how you pass from the > frontend the token to the nodejs service ? > > > On Sat, Mar 4, 2017 at 8:07 AM, Saransh Kumar <skm.8896(a)gmail.com&gt; wrote: > >> Hello Sebastien, Bruno >> >> >> Thanks for replying. :) >> >> Keycloak server: 2.5.1 >> keycloak-connect: 2.5.3 (node js adapter) >> >> Rest API on express node js which is to be secured:- >> >> var express = require('express');var router = express.Router();var app = express();var Keycloak = require('keycloak-connect');var keycloak =new Keycloak(); >> >> app.use( keycloak.middleware( { >> logout: '/logout', >> admin: '/',} )); >> >> router.get('/users',keycloak.protect(),function(req, res, next) { >> >> res.send('Reached here'); >> >> }); >> >> >> The response is : Error 403 Forbidden. >> >> Note: I have also included the package.json in the root folder. >> >> >> Thanks in advance >> >> >> On Sat, Mar 4, 2017 at 4:41 AM, Bruno Oliveira <bruno(a)abstractj.org&gt; >> wrote: >> >>> Last time I checked, the adapter works with bearer only. If you provide >>> the steps to reproduce, version of keycloak server, adapter version and the >>> error. That would help ;) >>> >>> On Fri, Mar 3, 2017, 8:05 PM Sebastien Blanc <sblanc(a)redhat.com&gt; wrote: >>> >>>> Well the adapter works with bearer only , what is the error that you >>>> are >>>> getting ? >>>> Le ven. 3 mars 2017 à 21:26, Saransh Kumar <skm.8896(a)gmail.com&gt; a >>>> écrit : >>>> >>>> > Hii Sebastien, >>>> > >>>> > Actually, the node js kc adapter is not working with bearer auth >>>> only. >>>> > So, I need to verify the access token myself with keycloak in node js >>>> > without using node js adapter or any other adapters. >>>> > Please help me out in this way. >>>> > >>>> > Thanks in advance. >>>> > Saransh >>>> > >>>> > On Sat, Mar 4, 2017 at 12:06 AM, Sebastien Blanc <sblanc(a)redhat.com&gt; >>>> > wrote: >>>> > >>>> > >>>> > >>>> > On Fri, Mar 3, 2017 at 7:04 PM, Saransh Kumar <skm.8896(a)gmail.com&gt; >>>> wrote: >>>> > >>>> > Hello all, >>>> > >>>> > I have a REST API in express node js. >>>> > I want to secure it with keycloak bearer auth only. >>>> > So, a keycloak token would be recieved in the Authorization header >>>> of the >>>> > GET request to the REST API. >>>> > I have to verify the token with keycloak *without using any >>>> adapters.* >>>> > Please help me out in the process. >>>> > >>>> > Are you not allowed to add any extra packages ? Just lookup the >>>> source >>>> > code of the nodejs kc adapter and paste it into your app ;) >>>> > >>>> > >>>> > >>>> > Thanks in advance >>>> > Saransh >>>> > _______________________________________________ >>>> > keycloak-user mailing list >>>> > keycloak-user(a)lists.jboss.org >>>> > https://lists.jboss.org/mailman/listinfo/keycloak-user >>>> > >>>> > >>>> > >>>> > >>>> _______________________________________________ >>>> keycloak-user mailing list >>>> keycloak-user(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>> >>> >> >