Clarification on introduction of new parameter in the requestURL in keycloak 26.0.5 #36041

snettar · 2024-12-19T11:05:33Z

snettar
Dec 19, 2024

We previously had Keycloak 24.0.5 installed on our setup.
After giving the login credentials of the particular user and hitting the submit button the requestURL is formed something like below

Request URL: https://<keycloak-url>/<relative-path>/realms/<realm-name>/login-actions/authenticate?session_code=<some-value>&execution=<some-value>&client_id=<client-id>&tab_id=<some-value>
Request Method: POST
Status Code: 302 Found

When we installed Keycloak 26.0.5, and after doing the same operation we are seeing that the requestURL is being formed as something below

Request URL: https://<keycloak-url>/<relative-path>/realms/<realm-name>/login-actions/authenticate?session_code=<some-value>&execution=<some-value>&client_id=<client-id>&tab_id=<some-value>&client_data=<some-value> 
Request Method: POST
Status Code: 302 Found

We want to know the reason why this new parameter client_data is being added? Could not find any such information in the release notes.

Answered by francescopezzulli

Apr 23, 2025

Hello, the client_data parameter is described here:

The purpose of clientData is to be able to send HTTP error response back to the client if authentication fails due some error and authenticationSession is not available anymore (was either expired or removed). So clientData need to contain all the data to be able to send such response. For instance redirect-uri, state in case of OIDC or RelayState in case of SAML etc.

Hope it helps.

View full answer

francescopezzulli · 2025-04-23T10:14:01Z

francescopezzulli
Apr 23, 2025

Hello, the client_data parameter is described here:

The purpose of clientData is to be able to send HTTP error response back to the client if authentication fails due some error and authenticationSession is not available anymore (was either expired or removed). So clientData need to contain all the data to be able to send such response. For instance redirect-uri, state in case of OIDC or RelayState in case of SAML etc.

Hope it helps.

1 reply

snettar Apr 24, 2025
Author

Thank you @francescopezzulli

Navigation Menu

Repository navigation

Clarification on introduction of new parameter in the requestURL in keycloak 26.0.5 #36041

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Clarification on introduction of new parameter in the requestURL in keycloak 26.0.5 #36041

Uh oh!

Uh oh!

snettar Dec 19, 2024

Replies: 1 comment · 1 reply

Uh oh!

francescopezzulli Apr 23, 2025

Uh oh!

snettar Apr 24, 2025 Author

snettar
Dec 19, 2024

Replies: 1 comment 1 reply

francescopezzulli
Apr 23, 2025

snettar Apr 24, 2025
Author