---------- Forwarded message ---------- From: Mehdi Sheikhalishahi <mehdi.alishahi(a)gmail.com&gt; Date: Sat, Mar 11, 2017 at 10:32 AM Subject: Obtain Token and Invoke Service throught CLI To: keycloak-user(a)lists.jboss.org Hi I have read http://blog.keycloak.org/2015/10/getting-started-with- keycloak-securing.html for trying to authenicate to KC with username and password through CLI. But it seems this method does not work with KC 2.5.4, because public client does not provide Redirect URI field. See below: Obtain Token and Invoke Service First we need to create a client that can be used to obtain the token. Go to the Keycloak admin console again and create a new client. This time give it the *Client ID* curl and select public for access type. Under *Valid Redirect URIs* enter http://localhost. How can I do this with KC 2.5.4? Thanks, Mehdi _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

First of all, in curret KC public client does not provide Redirect URI field. Then, I've create a client without this field. When I issue the following commnad: RESULT=`curl --data "grant_type=password&client_id=curl&username=user&password=password" http://localhost:8180/auth/realms/master/protocol/openid-connect/token` <http://localhost:8180/auth/realms/master/protocol/openid-connect/token> I get the following error: {"error":"invalid_grant","error_description":"Invalid user credentials"} access_token\n On Mon, Mar 13, 2017 at 12:18 PM, Marko Strukelj <mstrukel(a)redhat.com&gt; wrote: > What is it that you do exactly, and what error do you get? > > On Mon, Mar 13, 2017 at 11:14 AM, Mehdi Sheikhalishahi < > mehdi.alishahi(a)gmail.com&gt; wrote: > >> ---------- Forwarded message ---------- >> From: Mehdi Sheikhalishahi <mehdi.alishahi(a)gmail.com&gt; >> Date: Sat, Mar 11, 2017 at 10:32 AM >> Subject: Obtain Token and Invoke Service throught CLI >> To: keycloak-user(a)lists.jboss.org >> >> >> Hi >> >> I have read http://blog.keycloak.org/2015/10/getting-started-with- >> keycloak-securing.html for trying to authenicate to KC with username and >> password through CLI. But it seems this method does not work with KC >> 2.5.4, >> because public client does not provide Redirect URI field. >> >> See below: >> >> Obtain Token and Invoke Service >> >> First we need to create a client that can be used to obtain the token. Go >> to the Keycloak admin console again and create a new client. This time >> give >> it the *Client ID* curl and select public for access type. Under *Valid >> Redirect URIs* enter http://localhost. >> >> >> How can I do this with KC 2.5.4? >> >> Thanks, >> Mehdi >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >