[keycloak-user] Defining a new user password through REST API

Marek Posolda mposolda at redhat.com
Wed Jul 2 09:00:38 EDT 2014


Hi,

actually you can do it with this endpoint: 
http://docs.jboss.org/keycloak/docs/1.0-beta-3/rest-api/admin/realms/%7Brealm%7D/users/%7Busername%7D/#PUT 
. You need to pass whole user representation of particular user in the 
request body of this PUT request. See admin console (page for updating 
users) for more details.

Marek


On 1.7.2014 16:27, Rodrigo Sasaki wrote:
> How would I remove the update password required action via the REST API?
>
>
> On Tue, Jul 1, 2014 at 5:20 AM, Stian Thorgersen <stian at redhat.com 
> <mailto:stian at redhat.com>> wrote:
>
>     You can actually already do this if you want, both through
>     endpoints and the admin console. You just need to set a temporary
>     password and afterwards remove the update password required
>     action. As Marek says though it doesn't really make sense to do so.
>
>     ----- Original Message -----
>     > From: "Marek Posolda" <mposolda at redhat.com
>     <mailto:mposolda at redhat.com>>
>     > To: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com
>     <mailto:rodrigopsasaki at gmail.com>>, keycloak-user at lists.jboss.org
>     <mailto:keycloak-user at lists.jboss.org>
>     > Sent: Tuesday, 1 July, 2014 8:07:36 AM
>     > Subject: Re: [keycloak-user] Defining a new user password
>     through REST API
>     >
>     > Hi,
>     >
>     > Is it good practice to define password for users this way? I
>     assume that
>     > usually just user himself should have access to his plain-text
>     password and
>     > be able to login with it?
>     >
>     > If you really need this, there is just endpoint
>     >
>     http://docs.jboss.org/keycloak/docs/1.0-beta-3/rest-api/admin/realms/%7Brealm%7D/users/%7Busername%7D/reset-password/index.html
>     > for reset password, which is also used by admin console, but
>     user needs to
>     > choose new password when login for the first time after reset.
>     So I assume
>     > that this is the possibility you are already aware of.
>     >
>     > But note that after this reset, you know user's temporary
>     password, so you
>     > can login with this temporary password and update password as
>     user himself.
>     > Then user doesn't need to do anything, you just need to say him his
>     > password.
>     >
>     > Another possibility is to create new REST endpoint by yourself,
>     which will
>     > use model API to do exactly what you want. For example see this
>     > https://github.com/keycloak/keycloak/tree/master/testsuite/tools
>     which is
>     > REST application for adding big number of new users. You can
>     maybe use
>     > something similar.
>     >
>     > Marek
>     >
>     >
>     > On 1.7.2014 00:01, Rodrigo Sasaki wrote:
>     >
>     >
>     >
>     > Hello again!
>     >
>     > Is there a way for me to define a password for a user through
>     the REST API
>     > without him having to define a new one on the next login?
>     >
>     > The only method I found to be close to what I want was the one
>     that resets
>     > the password, but I would like to redefine it without the user
>     having
>     > anything to do with it.
>     >
>     > Is it possible?
>     >
>     > --
>     > Rodrigo Sasaki
>     >
>     >
>     > _______________________________________________
>     > keycloak-user mailing list keycloak-user at lists.jboss.org
>     <mailto:keycloak-user at lists.jboss.org>
>     > https://lists.jboss.org/mailman/listinfo/keycloak-user
>     >
>     >
>     > _______________________________________________
>     > keycloak-user mailing list
>     > keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
>     > https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
>
>
> -- 
> Rodrigo Sasaki

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20140702/1ae448b8/attachment-0001.html 


More information about the keycloak-user mailing list