Repository navigation
Retreiving access token via API call with x509 certificates #41146
Unanswered
pstatham-exp
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Our application is secured requiring valid x509 to access the UI. Calls made to the backend API require a valid JWT that is resolved upon succesfully logging in to the application. However a new paradigm has arisen where the API is required to be used programmatically by users, where they would not log into a UI. The use of x509 is still necessary for user authentication.
In reviewing the Server Admin Guide, there is this example:
This is a ROPC request which will not be valid should OAuth 2.1 be released and Keycloak updated accordingly. Additionally, users would not have the
--cacertvalue, which is the Keycloak server certificate. We've explored the option of doing agrant_type=client_credentialsbut that doesn't give us user information, even though we can get a JWT from the request.Does Keycloak support programmatic access token requests with x509 certificates provided for user authentication or is there some best practice flow for using x509 certificates to authenticate via an API?
All reactions