Resource Server to Resource Server REST API Call #14816

Aleson95 · 2022-10-10T08:39:45Z

Aleson95
Oct 10, 2022

In our microservices architecture there are 2 types of services / applications / clients that are registered to Keycloak:
-public client, this is our frontend applications using vue js
-bearer-only, this is our backend applications (resource servers) using java spring boot
I have a usecase where I need my backend application A calling backend application B or vice versa to be accepted or respected but I do not want to use the access token from the public client to be pass to the other microservice because each resource server has their own unique set of roles that were used by their respective microservices to authorized each API endpoint.
I just want to make sure that the REST API call is coming from the client that registered in keycloak which means this microservices is part of the services that I try to build.
Here is a diagram about the use case I talk about

Is there anything like client authentication, where I can authenticate using client id and secret and get an access token to be used to access any or restricted API endpoint of the specific client id?

Answered by jbman

Oct 11, 2022

You can use a confidential client with "Service Accounts Enabled". Such a client acts as a technical user with an own set of roles.
Such a client uses OAuth 2.0 Client credentials grant to get an access token.

View full answer

jbman · 2022-10-11T10:02:49Z

jbman
Oct 11, 2022

You can use a confidential client with "Service Accounts Enabled". Such a client acts as a technical user with an own set of roles.
Such a client uses OAuth 2.0 Client credentials grant to get an access token.

1 reply

Aleson95 Oct 12, 2022
Author

hello thank you for the reply this is what I needed thank you

Navigation Menu

Repository navigation

Resource Server to Resource Server REST API Call #14816

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Resource Server to Resource Server REST API Call #14816

Uh oh!

Aleson95 Oct 10, 2022

Replies: 1 comment · 1 reply

Uh oh!

Uh oh!

jbman Oct 11, 2022

Uh oh!

Aleson95 Oct 12, 2022 Author

Aleson95
Oct 10, 2022

Replies: 1 comment 1 reply

jbman
Oct 11, 2022

Aleson95 Oct 12, 2022
Author