[keycloak-user] Can a confidential Access Type client also accept bearer tokens?

[Pedro Igor Silva]

It should be fine to use the same client. However, you may want to set
autodetect-bearer-only in keycloak.json. See
https://www.keycloak.org/docs/latest/securing_apps/index.html#_java_adapter_config
.

On Thu, May 23, 2019 at 3:35 PM Ryan Slominski <ryans at jlab.org> wrote:

> I'm using the Wildfly client adapter to secure access for a web
> application and it works fine.   However, I was wondering if I could have a
> script to programmatically post some data to one of the web application's
> end points via a cron job.  The examples I have found of doing this assume
> you have a dedicated "bearer-only" access type client.    Do I have to
> create a separate client for this or can I re-use the existing web
> application end point, which has access type Confidential?
>
> I'm looking at the example here:
>
> http://planet.jboss.org/post/getting_started_with_keycloak_securing_a_rest_service
>
> Thanks,
>
> Ryan
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>