[keycloak-user] what does "unauthorized_client" mean?

Stian Thorgersen sthorger at redhat.com
Tue Oct 13 02:16:25 EDT 2015


Is it a confidential client? If so you must include the clientSecret as well

On 12 October 2015 at 22:04, Tim Dudgeon <tdudgeon.ml at gmail.com> wrote:

> That is enabled on both realm and client.
>
>
> On 12/10/2015 18:51, Fadi Abdin wrote:
>
> make sure they Direct Grant API enabled on the client and the realm
>
>
> On Mon, Oct 12, 2015 at 1:20 PM, Tim Dudgeon <tdudgeon.ml at gmail.com>
> wrote:
>
>> I'm having problems generating an access token.
>>
>> $ curl -X POST
>>
>> http://192.168.59.103:8080/auth/realms/Customer1/protocol/openid-connect/token
>> -H "Content-Type: application/x-www-form-urlencoded" -d 'username=user2'
>> -d 'password=user2' -d 'grant_type=password' -d 'client_id=app1'
>> {"error":"unauthorized_client"}
>>
>>  From what I can see everything is set up correctly and looks the same
>> to another realm/client/user that does work:
>> - realm exists and works
>> - user exists and can log in to console
>> - client has been created in realm
>>
>> But I'm getting "unauthorized_client" error.
>> What should I look at?
>>
>> Tim
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20151013/1526dfdb/attachment.html 


More information about the keycloak-user mailing list