[keycloak-user] Reset credentials link without tab_id parameter

Craig Setera craig at baseventure.com
Tue Jul 2 08:32:28 EDT 2019


We have a need to jump into the reset credentials flow from outside the
Keycloak login page.  When initiating from the login page, the URL looks
like the following:

https://keycloak-host/auth/realms/fm/login-actions/reset-credentials?client_id=my-client-id&tab_id=NH3L9bohxcU
<http://keycloak:8080/auth/realms/fm/login-actions/reset-credentials?client_id=bv-fund-mgr&tab_id=NH3L9bohxcU>

However, when initiating the forgotten password flow, we don't have access
to the tab_id, so we have been using:

https://keycloak-host/auth/realms/fm/login-actions/reset-credentials?client_id=my-client-id
<http://keycloak:8080/auth/realms/fm/login-actions/reset-credentials?client_id=bv-fund-mgr&tab_id=NH3L9bohxcU>

While this works to change the password, it ends up resulting with the
account management user interface at the end, and saving from there causes
an internal server error.  The user-facing results are definitely not
ideal.  Is there any way to make this work properly if not launching from
the login page?  I don't see anything in the Javascript adapter
documentation relative to reset credentials flow, so I don't know if there
is any way to form that URL?

Any help appreciated.
Craig

=================================
*Craig Setera*
*Chief Technology Officer*


More information about the keycloak-user mailing list