Hi everybody, I'm trying to find out if Keycloak has an endpoint where I can submit my username and password to get a code. Later with this code I could exchange it for an access token. According to the Keycloak's documentation and taking a looking into the Keycloak source code, the only endpoint I found out is the following: auth/realms/{realm-name}/protocol/openid-connect/auth?response_type=code&client_id={client_id}&redirect_uri={redirect_uri}&state={state}&login=true However, this endpoint returns a HTML page with a form where an user could enter with username and password. The form action is: auth/realms/zwift/login-actions/request/login?code={code} The code parameter is generated by Keycloak when the HTML was processed and served, so I cannot call this endpoint directly because I need this code parameter. My question is: in any Keycloak version, is there a public Keycloak endpoint where I can submit username and password to get a code that will be used to get a access token later via /token endpoint? Just a note, I'm using an old Keycloak version: v1.2.0-Final. Regards, _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Thanks Bruno, but these APIs are only for admin use. I'm looking for a OIDC API where an user can submit his username/password to get a code. Regards, On Thu, Mar 9, 2017 at 2:26 PM Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: > Please look at the docs > http://www.keycloak.org/docs-api/2.5/rest-api/index.html and upgrade if > possible. > > On Thu, Mar 9, 2017 at 2:12 PM Bernardo Pacheco <bernardo(a)zwift.com&gt; > wrote: > > Hi everybody, > > I'm trying to find out if Keycloak has an endpoint where I can submit my > username and password to get a code. Later with this code I could exchange > it for an access token. > > According to the Keycloak's documentation and taking a looking into the > Keycloak source code, the only endpoint I found out is the following: > > > auth/realms/{realm-name}/protocol/openid-connect/auth? response_type=code&client_id={client_id}&redirect_uri={ redirect_uri}&state={state}&login=true > > However, this endpoint returns a HTML page with a form where an user could > enter with username and password. The form action is: > > auth/realms/zwift/login-actions/request/login?code={code} > > The code parameter is generated by Keycloak when the HTML was processed and > served, so I cannot call this endpoint directly because I need this code > parameter. > > My question is: in any Keycloak version, is there a public Keycloak > endpoint where I can submit username and password to get a code that will > be used to get a access token later via /token endpoint? > > Just a note, I'm using an old Keycloak version: v1.2.0-Final. > > Regards, > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > > -- BERNARDO PACHECO *SOFTWARE ENGINEER at Zwift, Inc.* bernardo(a)zwift.com <eric(a)zwift.com&gt; _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

In a newer KC version, when I call POST /realms/{realm-name}/protocol/openid-connect/token: 1 - Which body params should I send? 2 - Does this API return a code or an access token / refresh token? The older version has a /auth/realms/{realm-name}/tokens/grant/access API, but it is deprecated and I can't call it. Thanks Sebastien, On Thu, Mar 9, 2017 at 3:49 PM Sebastien Blanc <sblanc(a)redhat.com&gt; wrote: > With Direct Grant Access enabled , you can use > /realms/{realm-name}/protocol/openid-connect/token but for older Keycloak > version I think it's something like > /auth/realms/aerogear/tokens/grants/access , it's a POST and the body > must form encoded > > > On Thu, Mar 9, 2017 at 7:32 PM, Bernardo Pacheco <bernardo(a)zwift.com&gt; > wrote: > > Thanks Bruno, but these APIs are only for admin use. I'm looking for a OIDC > API where an user can submit his username/password to get a code. > > Regards, > > On Thu, Mar 9, 2017 at 2:26 PM Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: > > > Please look at the docs > > http://www.keycloak.org/docs-api/2.5/rest-api/index.html and upgrade if > > possible. > > > > On Thu, Mar 9, 2017 at 2:12 PM Bernardo Pacheco <bernardo(a)zwift.com&gt; > > wrote: > > > > Hi everybody, > > > > I'm trying to find out if Keycloak has an endpoint where I can submit my > > username and password to get a code. Later with this code I could > exchange > > it for an access token. > > > > According to the Keycloak's documentation and taking a looking into the > > Keycloak source code, the only endpoint I found out is the following: > > > > > > > auth/realms/{realm-name}/protocol/openid-connect/auth? response_type=code&client_id={client_id}&redirect_uri={ redirect_uri}&state={state}&login=true > > > > However, this endpoint returns a HTML page with a form where an user > could > > enter with username and password. The form action is: > > > > auth/realms/zwift/login-actions/request/login?code={code} > > > > The code parameter is generated by Keycloak when the HTML was processed > and > > served, so I cannot call this endpoint directly because I need this code > > parameter. > > > > My question is: in any Keycloak version, is there a public Keycloak > > endpoint where I can submit username and password to get a code that will > > be used to get a access token later via /token endpoint? > > > > Just a note, I'm using an old Keycloak version: v1.2.0-Final. > > > > Regards, > > > > _______________________________________________ > > keycloak-user mailing list > > keycloak-user(a)lists.jboss.org > > https://lists.jboss.org/mailman/listinfo/keycloak-user > > > > -- > BERNARDO PACHECO > > *SOFTWARE ENGINEER at Zwift, Inc.* > bernardo(a)zwift.com <eric(a)zwift.com&gt; > > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > > _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user