[keycloak-dev] Adding a validate password endpoint in the Admin API

Wim Vandenhaute wim.vandenhaute at gmail.com
Tue Jun 27 03:03:56 EDT 2017


Hello list,

Via an admin portal of a customer I am working for, they provide a feature
where an admin can edit the user's data, including setting a new password.

For the sake of atomicity, all update steps first go through a series of
validations for all modified data before actually committing the changes
and (if needed) updating the keycloak password

At the moment, there is no way to pre-update do a validity check of the
updated password against keycloak's configured password policy(ies)

Therefor I would propose to have a validate-password endpoint in the Admin
API.

I've made a pull request already here:
  *  https://github.com/keycloak/keycloak/pull/4229

Any thoughts on this?

Kind regards,
Wim


More information about the keycloak-dev mailing list