[keycloak-user] Client Initiated Account Linking doubt

[Bill Burke]

Non servlet apps should have access to the token too.  client session 
and user session ids are in the token.


On 5/4/17 6:44 AM, Tomás García wrote:
> I'm looking at this doc:
> https://keycloak.gitbooks.io/documentation/server_development/topics/identity-brokering/account-linking.html
>
> And unless your app lives inside a Java servlet guarded by Keycloak,
> there's no way to use this feature, right? Due to the hash generation. I
> don't see a way to get a client / user session Id since they're internal
> stuff in Keycloak associated thanks to the cookie in the user's browser. I
> get why it's needed though and I don't see any good alternative right now
> for non-servlet apps (OpenID Connect enabled apps made in other languages
> for instance)... but it's unfortunate that the doc doesn't clarify it.
>
> Thanks.
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user