How do I enable http logging for requests and responses to the admin API? #38455

stranljip · 2025-03-26T15:53:26Z

stranljip
Mar 26, 2025

I am trying to debug a situation where users are being provisioned into Keycloak via the admin API. The user is being created but the component that provisions the user into Keycloak is stuck in a state that says "Provisioning". I want to debug the situation by looking into the HTTP traffic to/from the admin API but all attempts that I have tried so far have not lead to the logs containing the HTTP log information.
So far I have tried

setting the logger for org.apache.http to DEBUG (via environment variable)
setting the logger for org.keycloak.services to DEBUG (via environment variable)
enabling the http access log for Quarkus using Java properties

Until now nothing has worked.

Atm I am using the Bitnami container on Kubernetes, the KC version is 26.0.8

Any idea how to achieve this is welcome :-/

mhagnumdw · 2026-02-06T21:22:07Z

mhagnumdw
Feb 6, 2026

I just found this thread after several attempts. I'd also like to know if it's possible to enable request and response logging for the keycloak-admin-client library. Anyone?

3 replies

danielgit0 Feb 17, 2026

I was able to log the requests/responses by enabling the logging for the package org.apache.http. In my case i am using spring-boot so I used the following in my application.yml:

logging:
    level:
        org.apache.http:  DEBUG

EDIT: This is an extract from the logs I could see afterwards where the keycloak-admin-client is requesting the access token. I left the rest out for "shortness", but I could see the subsequent request to the admin API too

2026-02-17T14:53:20.070Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] o.a.http.impl.execchain.MainClientExec   : Executing request POST /realms/your-realm/protocol/openid-connect/token HTTP/1.1
2026-02-17T14:53:20.070Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] o.a.http.impl.execchain.MainClientExec   : Proxy auth state: UNCHALLENGED
2026-02-17T14:53:20.070Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> POST /realms/your-realm/protocol/openid-connect/token HTTP/1.1
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> Accept: application/json
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> Authorization: Basic base64credentials
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> Content-Type: application/x-www-form-urlencoded
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> Content-Length: 29
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> Host: your.keycloak.host
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> Connection: Keep-Alive
2026-02-17T14:53:20.071Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.headers                  : http-outgoing-1 >> User-Agent: Apache-HttpClient/4.5.14 (Java/25)
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "POST /realms/your-realm/protocol/openid-connect/token HTTP/1.1[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "Accept: application/json[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "Authorization: Basic base64credentials[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "Content-Type: application/x-www-form-urlencoded[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "Content-Length: 29[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "Host: your.keycloak.host[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "Connection: Keep-Alive[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "User-Agent: Apache-HttpClient/4.5.14 (Java/25)[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "[\r][\n]"
2026-02-17T14:53:20.072Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 >> "grant_type=client_credentials"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "HTTP/1.1 200 OK[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "cache-control: no-store[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "pragma: no-cache[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "content-length: 1727[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "content-type: application/json[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "referrer-policy: no-referrer[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "strict-transport-security: max-age=31536000; includeSubDomains[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "x-content-type-options: nosniff[\r][\n]"
2026-02-17T14:53:20.477Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "x-frame-options: SAMEORIGIN[\r][\n]"
2026-02-17T14:53:20.478Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "x-xss-protection: 1; mode=block[\r][\n]"
2026-02-17T14:53:20.478Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "date: Tue, 17 Feb 2026 14:53:20 GMT[\r][\n]"
2026-02-17T14:53:20.478Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "via: 1.1 google[\r][\n]"
2026-02-17T14:53:20.478Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "[\r][\n]"
2026-02-17T14:53:20.478Z DEBUG 1 --- [your-service] [nio-8080-exec-7] [3777830dd219aeaaef0a1be2a4fd3f10-7562aee730d57b5e] org.apache.http.wire                     : http-outgoing-1 << "{"access_token":"token","expires_in":300,"refresh_expires_in":0,"token_type":"Bearer","not-before-policy":1745409974,"scope":"profile email"}"

mhagnumdw Feb 17, 2026

@danielgit0, with this you were able to log the request/response of the requests made by the Keycloak client? With this I can log the requests made to my application's API and other requests, but not from the Keycloak client.

Anyway, I'll try again later.

danielgit0 Feb 17, 2026

yes, I edited my post by adding an extract of the logs

Navigation Menu

Repository navigation

How do I enable http logging for requests and responses to the admin API? #38455

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 3 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

How do I enable http logging for requests and responses to the admin API? #38455

Uh oh!

stranljip Mar 26, 2025

Replies: 1 comment · 3 replies

Uh oh!

mhagnumdw Feb 6, 2026

Uh oh!

Uh oh!

danielgit0 Feb 17, 2026

Uh oh!

mhagnumdw Feb 17, 2026

Uh oh!

danielgit0 Feb 17, 2026

stranljip
Mar 26, 2025

Replies: 1 comment 3 replies

mhagnumdw
Feb 6, 2026