[keycloak-user] IS there is Keycloak REST API for users

[Stan Silvert]

For some features such as "reset password", we are providing 
Application-Initiated Actions (AIA) instead of a REST API.  This is the 
same as our Required Action feature, except that it is kicked off from 
an application instead of via the login process.

The design document is here and Phase I is implemented in master, but 
not yet documented:
https://github.com/keycloak/keycloak-community/blob/master/design/application-initiated-actions.md

So for reset password, you can now go to the following URL from your 
application:

|../realms/myrealm/protocol/openid-connect/auth ?response_type=code 
&client_id=myclient &redirect_uri=https://myclient.com 
&kc_action=update_password|

The user resets the password and then is redirected back to your 
application.

Will this suffice instead of a REST API?  I'd be interested to know if 
there is a solid use case where AIA is not good enough.

Stan

On 8/20/2019 7:34 AM, Chris Boot wrote:
> On 20/08/2019 12:02, Shiva Prasad Thagadur Prakash wrote:
>> Hi Guys,
>> Does keycloak have user REST API like it has keycloak admin REST API?
>> If so, is there a documentation for user REST API? For example, can a
>> user himself change or reset his password via REST API instead of doing
>> it through the UI? Eagerly waiting to hear from you.
> I think what you want is the "Account Management REST API", which is a
> "Preview" feature that must be enabled on your installation. See:
>
> https://github.com/keycloak/keycloak-documentation/blob/master/server_installation/topics/profiles.adoc
>
> HTH,
> Chris
>