You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Keycloak returning wrong Access Token for other user.
#40140
In Keycloak, we are using a custom authenticator. When obtaining a token via the client for a user, we encounter an issue where, if the client has no active sessions, user1 receives a valid token. However, when we request other an access token for user2, we end up receiving a access token for user1 instead.
According to the logs, when requesting the code for user2, user2 is correctly referenced. However, when requesting the access token, the method getUserById for user1 is also called.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
keycloak version: 19.0.0
we use grant_type authorization_code
In Keycloak, we are using a custom authenticator. When obtaining a token via the client for a user, we encounter an issue where, if the client has no active sessions, user1 receives a valid token. However, when we request other an access token for user2, we end up receiving a access token for user1 instead.
According to the logs, when requesting the code for user2, user2 is correctly referenced. However, when requesting the access token, the method getUserById for user1 is also called.
All reactions