[keycloak-user] 2FA via REST API

[Stefan Schlesinger]

Hi Thomas,

I’m trying to use the examples provided in the thread you pointed me at,
but the last call to the validation endpoint gives me a 404.

I also tried to find documentation, but apart from the admin REST API
and the Authorization API[1] (which covers basic usage) I couldn’t find
anything.

My test script:

https://gist.github.com/sts/4c6f8fa759cec88197ca6dfcf306c391

Best,

Stefan.

[1] Authorization API - https://keycloak.gitbooks.io/authorization-services-guide/content/v/2.5/topics/service/authorization/authorization-api.html

> On 07 Jan 2017, at 14:31, Thomas Darimont <thomas.darimont at googlemail.com> wrote:
> 
> have a look at this example from the mailing list:
> http://lists.jboss.org/pipermail/keycloak-dev/2016-November/008419.html
> 
> 2017-01-06 16:17 GMT+01:00 Stefan Schlesinger <sts at ono.at>:
>> Anyone knows how to verify an OTP (TOTP) token against the Keycloak Openid REST API for clients with direct access grants enabled?