[keycloak-user] Clarification regarding authentication flows

Stian Thorgersen sthorger at redhat.com
Wed Dec 14 00:42:01 EST 2016


Browser flow is used for redirect based flow (regular oauth) while direct
grant flow is used for resource owner credential grant flow.

On 2 December 2016 at 19:01, Michael Furman <michael_furman at hotmail.com>
wrote:

> Hi Matt,
>
> The authentication flows are configured here:
>
> https://keycloak.gitbooks.io/server-adminstration-guide/
> content/topics/authentication/flows.html
>
>
> I guess that when I access REST API the request uses the Browser flow but
> I will happy for the confirmation.
>
>
> In addition, when I access this API http://localhost:8080/auth/
> realms/master/protocol/openid-connect/token
>
> what flow is used?
>
> The browser flow?
>
> The Direct Grant Flow?
>
> Regards,
>
>    Michael
>
>
> ________________________________
> From: Matt H <f14d_tomcat at hotmail.com>
> Sent: Friday, December 2, 2016 6:16 PM
> To: Michael Furman; keycloak-user at lists.jboss.org
> Subject: Re: Clarification regarding authentication flows
>
>
> I'm not following exactly.  Where are you setting/changing the flows?
>
>
> This REST API is to make changes in Keycloak like you would do through the
> UI.  If that is what you want to do, you would make a POST like the example
> shows with the required entries in the form.
>
>
> By default, the realm Master is there and so is the client_id admin-cli.
> The only thing that should change in their example is the username and
> password.  For this you use the same username and password you would access
> the Admin UI with.
>
>
> If that all worked, you would receive an access token back to make those
> amdin calls.
>
>
> ________________________________
> From: keycloak-user-bounces at lists.jboss.org <keycloak-user-bounces at lists.
> jboss.org> on behalf of Michael Furman <michael_furman at hotmail.com>
> Sent: Friday, December 2, 2016 9:13 AM
> To: keycloak-user at lists.jboss.org
> Subject: Re: [keycloak-user] Clarification regarding authentication flows
>
> Can anybody help?
>
> Regards,
>   Michael
>
>
>
> ________________________________
> From: keycloak-user-bounces at lists.jboss.org <keycloak-user-bounces at lists.
> jboss.org> on behalf of Michael Furman <michael_furman at hotmail.com>
> Sent: Thursday, December 1, 2016 9:26 AM
> To: keycloak-user at lists.jboss.org
> Subject: [keycloak-user] Clarification regarding authentication flows
>
> Hi,
> What type of the authentication flow used for the realm REST API
> authentication?
> The browser flow?
> What type of the authentication flow used to obtain the access token?
> https://keycloak.gitbooks.io/server-developer-guide/
> content/v/2.3/topics/admin-rest-api.html
>
> The Direct Grant Flow?
> Regards,
>   Michael
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> keycloak-user Info Page - JBoss Developer<https://lists.jboss.
> org/mailman/listinfo/keycloak-user>
> lists.jboss.org
> To see the collection of prior postings to the list, visit the
> keycloak-user Archives. Using keycloak-user: To post a message to all the
> list members ...
>
>
>
> keycloak-user Info Page - JBoss Developer<https://lists.jboss.
> org/mailman/listinfo/keycloak-user>
> keycloak-user Info Page - JBoss Developer<https://lists.jboss.
> org/mailman/listinfo/keycloak-user>
> lists.jboss.org
> To see the collection of prior postings to the list, visit the
> keycloak-user Archives. Using keycloak-user: To post a message to all the
> list members ...
>
>
>
> lists.jboss.org
> To see the collection of prior postings to the list, visit the
> keycloak-user Archives. Using keycloak-user: To post a message to all the
> list members ...
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> keycloak-user Info Page - JBoss Developer<https://lists.jboss.
> org/mailman/listinfo/keycloak-user>
> lists.jboss.org
> To see the collection of prior postings to the list, visit the
> keycloak-user Archives. Using keycloak-user: To post a message to all the
> list members ...
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>


More information about the keycloak-user mailing list