Part 2 - Configuring the keycloak server for REST API usage.

#keycloak #configuration
This video explains various configuration flexibilities that Keycloak provides and configuring by creating realm, client, user and so on.

[@bader-eddineqodia5964]

Really so nice explanation, keep going ...!

[@diveintodev]

Thanks a lot!

[@philipposkazuki]

2:42 Thank you for videos. Very helpful. I have a question regarding the redirect the direct URI of the client. I am using the same URI you mentioned, however I keep getting error: Invalid parameter: redirect_uri. I found a solution on stackoverflow suggesting to to put * there, I tried it and it worked, however that cause security issues. What could be the cause and the solution to this issue? Ps: I am running keycloak container.

[@diveintodev]

The client (resource server like Spring boot application) URI should be accessible from your keycloak docker container. If you use local keycloak then the URI specified in the video will be accessible to the keycloak. For container keycloak you can specify the accessible URI.

[@premierde]

Use the same url as redirect in weborigin without *

[@codingispassion6376]

Hi, I am integrating the keycloak login endpoint with the react js. While logging in I am getting cors error. So how can I resolve it? When I am enabling the cors chrome extension then it is working fine.

[@AbhilashaVar]

HI user registered using passwordless authentication in keycloak rest api i need this is this possible??

[@Gsuresh_3]

Am using keycloak 18 version, where can i find client credentials?

[@diveintodev]

In your client details, change "Access Type" property to "confidential" and save. You will then see a new tab with name "Credentials". But I suggest to use latest version if you are learning. If you have this version in a company you work, then I would suggest to migrate if possible.

[@Gsuresh_3]

Where to find client authentication option

[@neko_nik]

I have my saas product, my users dont want to do get access token from refresh token and do the flow but instead they want API Tokens with No Expiration, how can i do this ?

[@diveintodev]

You can go to "Realm Settings -> Sessions" and update the "SSO session idle" and "SSO session max" up to 5,000 days. Also you need to update the "Access token lifespan" property under "Realm Settings -> Tokens" to 5,000 days. You can refer kzbin.info/www/bejne/annKhaGwhtR3lZY

[@premierde]

Instead of Direct grant why not use client credentials as grant type for RESTapps too?

[@diveintodev]

How do we distinguish between different logged in users in that case?

[@revolutionInc]

i have keycloak 23 and the whole Credentials section is missing. RIP

[@diveintodev]

You need to enable "Client authentication" in "Settings" tab of client details to view "Credentials" section.

[@revolutionInc]

@@diveintodevthank you!

[@krishnabaile6535]

can you please share your conf json?

[@diveintodev]

You can find it here github.com/dive-into-dev/quarkus-keycloak/blob/main/keycloak/realm-export.json