You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm building an Android app with Spring Boot backend, and using Keycloak for auth. I've added Google IDP to Keycloak and am showing it in the built-in web view in my app, but it seems to ignore the system/Play Market account the user has attached to the phone, which results in the user having to log in to Google from a clean slate.
I decided to use native libraries to sign the user in, but now I'm having difficulty connecting it all to Keycloak.
I'm getting Google-issued idToken and accessToken, so I tried having my server do the conversion from Google to Keycloak token. I'm receiving the idToken from the app, creating a new user if it doesn't exist, attaching the Google Federated Identity to the user by email if it wasn't attached yet, but I don't understand what to do next.
I was trying to exchange the Google accessToken for Keycloak one using the /protocol/openid-connect/token with grant_type=urn:ietf:params:oauth:grant-type:token-exchange, but it seems like with FGAP:V2 it isn't going to be supported anymore.
What are my options to allow native Android sign-in while connecting to Keycloak? Ideally, I'd like to avoid deprecated solutions as I prefer to keep my tech stack up to date.
Thanks in advance!
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I'm building an Android app with Spring Boot backend, and using Keycloak for auth. I've added Google IDP to Keycloak and am showing it in the built-in web view in my app, but it seems to ignore the system/Play Market account the user has attached to the phone, which results in the user having to log in to Google from a clean slate.
I decided to use native libraries to sign the user in, but now I'm having difficulty connecting it all to Keycloak.
I'm getting Google-issued
idTokenandaccessToken, so I tried having my server do the conversion from Google to Keycloak token. I'm receiving theidTokenfrom the app, creating a new user if it doesn't exist, attaching the Google Federated Identity to the user by email if it wasn't attached yet, but I don't understand what to do next.I was trying to exchange the Google accessToken for Keycloak one using the
/protocol/openid-connect/tokenwithgrant_type=urn:ietf:params:oauth:grant-type:token-exchange, but it seems like withFGAP:V2it isn't going to be supported anymore.What are my options to allow native Android sign-in while connecting to Keycloak? Ideally, I'd like to avoid deprecated solutions as I prefer to keep my tech stack up to date.
Thanks in advance!
All reactions