[keycloak-user] can we use authorization with bearer-only ?

Stian Thorgersen sthorger at redhat.com
Mon Jan 2 09:39:10 EST 2017


Would it not make sense that a bearer-only aka a service is able to use the
authz services? Why does it need to be able to obtain tokens?

On 28 December 2016 at 02:19, Pedro Igor <psilva at redhat.com> wrote:

> Hi,
>
> Your client can't be set as bearer-only on Keycloak Server. You can still
> use bearer-only on the adapter configuration though. Keycloak doesn't allow
> "bearer only" clients (when setting up your client on the server) to obtain
> tokens from the server. Try to change your client to "confidential" on the
> server and set bearer-only on your adapter configuration (keycloak.json).
>
> Regards.
> Pedro Igor
>
> On 12/26/2016 1:34:06 PM, uğur kolip <ugur.kolip at gmail.com> wrote:
> can we use bearer-only with authorization ?
> if it can be , how can we use ? are there any example ?
> when i try to use with photoz example , i get bad request (or 403 i am not
> sure , i change a lot of thing)
> Because i don't want redirect or store session , it can be used by mobil
> apps .
>
> Thank you for helping
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>


More information about the keycloak-user mailing list