[keycloak-dev] Credentials in javascript adapter

Michal Hajas mhajas at redhat.com
Thu Nov 7 01:39:40 EST 2019


Hello,

in Javascript adapter we have a possibility to configure a client secret
[1] in order to use Basic authorization for requests for token endpoint
[2]. I haven't found any information in docs about it and I don't
understand why we have it there as public clients don't have secrets. Is
this useful in some scenarios or we should remove it?

Michal

[1]
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L882
&
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L866

[2]
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L617
&
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/js/src/main/resources/keycloak.js#L732


More information about the keycloak-dev mailing list