[keycloak-dev] Credentials in javascript adapter
Michal Hajas
mhajas at redhat.com
Thu Nov 7 01:39:40 EST 2019
Hello,
in Javascript adapter we have a possibility to configure a client secret
[1] in order to use Basic authorization for requests for token endpoint
[2]. I haven't found any information in docs about it and I don't
understand why we have it there as public clients don't have secrets. Is
this useful in some scenarios or we should remove it?
Michal
[1]
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L882
&
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L866
[2]
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L617
&
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L732
More information about the keycloak-dev
mailing list