make sure they Direct Grant API enabled on the client and the realm On Mon, Oct 12, 2015 at 1:20 PM, Tim Dudgeon <tdudgeon.ml(a)gmail.com <mailto:tdudgeon.ml@gmail.com>> wrote: I'm having problems generating an access token. $ curl -X POST http://192.168.59.103:8080/auth/realms/Customer1/protocol/openid-connect/... -H "Content-Type: application/x-www-form-urlencoded" -d 'username=user2' -d 'password=user2' -d 'grant_type=password' -d 'client_id=app1' {"error":"unauthorized_client"} From what I can see everything is set up correctly and looks the same to another realm/client/user that does work: - realm exists and works - user exists and can log in to console - client has been created in realm But I'm getting "unauthorized_client" error. What should I look at? Tim _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user

Is it a confidential client? If so you must include the clientSecret as well On 12 October 2015 at 22:04, Tim Dudgeon <tdudgeon.ml(a)gmail.com <mailto:tdudgeon.ml@gmail.com>> wrote: That is enabled on both realm and client. On 12/10/2015 18:51, Fadi Abdin wrote: > make sure they Direct Grant API enabled on the client and the realm > > > On Mon, Oct 12, 2015 at 1:20 PM, Tim Dudgeon > <tdudgeon.ml(a)gmail.com <mailto:tdudgeon.ml@gmail.com>> wrote: > > I'm having problems generating an access token. > > $ curl -X POST > http://192.168.59.103:8080/auth/realms/Customer1/protocol/openid-connect/... > -H "Content-Type: application/x-www-form-urlencoded" -d > 'username=user2' > -d 'password=user2' -d 'grant_type=password' -d 'client_id=app1' > {"error":"unauthorized_client"} > > From what I can see everything is set up correctly and looks > the same > to another realm/client/user that does work: > - realm exists and works > - user exists and can log in to console > - client has been created in realm > > But I'm getting "unauthorized_client" error. > What should I look at? > > Tim > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > <mailto:keycloak-user@lists.jboss.org> > https://lists.jboss.org/mailman/listinfo/keycloak-user > > _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user