Part 3 - Using keycloak APIs to generate token, check the validity, and logout the user.

#keycloak #keycloakAPI #keycloakREST #postman

This video explains various REST APIs that are provided by the keycloak to generate the access token, to check for the validity of the access token, to logout from the keycloak which removes the active token, and to regenerate a new access token using and existing refresh token.

[mauriciocarrion]

Thank's friend, you help me a lot!

[AdriennSzékely-co]

Hi! Do you have an example of how I could implement these(login, logout, introspect and refresh) in the backend(spring boot)?

[UnDevMas]

"When should I use a confidential client and when a public one in Keycloak? Could you help me understand this, please? "

[kshitijlad]

Hello, I want to hit the login API from my local, And I have connected to Keycloak server on web, Was unable to install keycloak on machine . I want my users to be able to login from my page rather than using keycloak,

[pratheekbanagar]

Sir I'm using KeyCloak version 25.0.1 I did follow though your steps but, in postman I got "error": "unauthorized_client",
"error_description": "Invalid client or Invalid client credentials", please suggest sir

[bol]

Good Video. Is there a similar explanation with restassured library ?

[syedhannan]

Can an admin user get an access token on behalf of the other users present in the client? My use case is to add authentication to REST APIS where i dont want the user to enter the user name and password but instead they should add the access token which will be shared my an admin user.

[AmitPujar-dg]

Hi Well explained sir, i need to integrate otp verification after login of user what is process for that

[svr_]

Hey can u plz create a video on how to implement passkey using keycloak and spring boot, through rest api?

[YongTingLow]

Hi, May I know why am I getting {active=false} for token introspect API when the session is available inside keycloak?

[amitngm]

I need one use case on authorization. There are 2 groups. Users of both group have an aceess of role incident-user. I want to design a policy for an incident resource. User of each group can view and update a ticket for their groups only. How to achieve it

[lennindavila]

Hi, Tried the same and works as you shows, but after logout I call any other endpoint using the access_token Im getting a valid response and in the keycloak session screen is showing me again the session, I read that I have to use revoke endpoint to make sure this access_token is not valid, but I didnt tried yet.

do you have a video about the logout and revoke differences in keycloak?

[AvijitDas-njvp]

is there any way for introspect with out using client_secrect ?

[xb]

I dont really understand what's the purpose of the client secret here

[utkarshshukla]

what is username and password which you entered in postman and where to find this ?

[adnan]

I want to get logged in User Profile after successful login from UI profile. I'm able to login and redirect to my application not issues with that; but I'm not getting user or access_token in code so that I can get user... Can you please help me in that.