Want to use OpenId Connect authentication in ASP .Net server using Keycloak #19474

Franco8888 · 2023-03-31T13:49:27Z

Franco8888
Mar 31, 2023

Want to use Direct Grant Flow
Want to authenticate a user and get access Token and use the access token to authenticate as Bearer token when calling endpoint on ASP .Net server

Using .Net 7

Server code in program.cs:

(services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
            })
            .AddOpenIdConnect(options =>
            {
                options.Authority = "http://localhost:8080/realms/GT/";
                options.ClientId = "gt_client";
                options.ClientSecret = "******************";
                options.ResponseType = OpenIdConnectResponseType.Code;
                options.GetClaimsFromUserInfoEndpoint = true; // MAYBE FOR ROLES
                options.Scope.Add("openid");
                options.Scope.Add("profile");
                options.RequireHttpsMetadata = false;  // allow HTTP, only in development
                options.SaveTokens = true;
            });)

I get the the access token using:

I am using direct grant flow so the following settings of my Keycloak client are as follows:

Client authentication: On
Standard Flow: Off (If I set this setting to on I get the browser requesting login which I do not want, If I set)
DIrect access grants: On
Service accounts roles: On
Rest of the settings are off

When calling the endpoint on my server I get the following:
If Standard Flow is OFF:
I get this error: Client is not allowed to initiate browser login with given response_type. Standard flow is disabled for the client.
If Standard Flow is ON:
I get the Keycloak browser login which I do not want. I want to use the access_token as bearer token to authenticate.

What would I change to get the desired results?

darius-m · 2023-04-06T13:28:15Z

darius-m
Apr 6, 2023

If I remember correctly, the resource owner password credentials grant (direct access grant) will simply send the ID tokens back to the application; the code response type is used for the standard flow, and you should use the password grant, as mentioned in the securing applications guide.

0 replies

Navigation Menu

Repository navigation

Want to use OpenId Connect authentication in ASP .Net server using Keycloak #19474

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Want to use OpenId Connect authentication in ASP .Net server using Keycloak #19474

Uh oh!

Franco8888 Mar 31, 2023

Replies: 1 comment

Uh oh!

darius-m Apr 6, 2023

Franco8888
Mar 31, 2023

darius-m
Apr 6, 2023