[keycloak-user] Grabbing messages flow between oidc client and Kc

Tech tech at psynd.net
Fri Apr 21 07:45:49 EDT 2017


Dear experts,

we are running the following test between a client written in PHP and 
deployed on IIS and KC (2.5.4) using OIDC.

Our main configuration:

  * ClientID and Name: IIS-client
  * Enabled [On]
  * Consent Required [Off]
  * Protocol [Oidc]
  * Access type [confidential]
  * Standard flow enabled [On]
  * Implicit Flow enabled [Off]
  * Direct access grant enabled [On]
  * Service accounts enabled [Off]
  * Authorization Enabled [Off]
  * Root Url [http://localhost:56579/*]
  * Valid redirect [http://localhost:56579/]
  * Admin [http://localhost:56579/]

We challenge this configuration from our VB code where:

Redirection
code = 
WbCGHl6Btf5QemAJ3aGEsaBx-0zxnyiC1Hsx7hYIQFU.4ead731d-871a-4ba9-bbdd-1bcb251616dc
state = ayyd9co1zzcar83
sClientId = IIS-client
sClientSecret = b1c08260-5f8d-4f18-95e4-6928e340d1d2

*Token Request*:
Header:
authorization = Basic 
SVNNLWNsaWVudDpiMWMwODI2MC01ZjhkLTRmMTgtOTVlNC02OTI4ZTM0MGQxZDI=
content-type = application/json
charset = utf-8

FormField:
grant_type=authorization_code&code=WbCGHl6Btf5QemAJ3aGEsaBx-0zxnyiC1Hsx7hYIQFU.4ead731d-871a-4ba9-bbdd-1bcb251616dc&state=ayyd9co1zzcar83&scope=openid&redirect_uri=http%3a%2f%2flocalhost%3a56579%2f
Try POST oWebClient.UploadString at :
sTokenUrl = 
http://localhost:8080/auth/realms/Test/protocol/openid-connect/token



Keycloak is replying with an error 400, we have the feeling that is not 
correctly receiving the message in the format it is expecting, but we 
are not neither able to grab the message from the Keycloak's to read 
what is actually Keycloak receiving.

Could you please support?

Thanks



More information about the keycloak-user mailing list