question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Can't login to confidential client

See original GitHub issue

Bug Report or Feature Request (mark with an x)

- [] bug report
- [] feature request
- [x] Question

Versions.

Keycloak-angular: 4.0.0-beta.1 Angular 6.0.3 Keycloak 3.4.3.Final

Question

I’m trying to get this package to work for the last couple of hours. When my application is posting to http://127.0.0.1:8180/auth/realms/crydash/protocol/openid-connect/token i get the following: {“error”:“unauthorized_client”,“error_description”:“Client secret not provided in request”}. This is probably due to my client being a ‘confidential client’. My only goal with this package is to install it so that i can login into my backend whilst working on the Angular development server. This won’t be a problem when I deploy it on the api server (Wildfly) eventually.

Does anyone know how to get this to work with a client secret? I’ve been digging around but I’ve yet to found a solution for this.

image

Issue Analytics

  • State:closed
  • Created 5 years ago
  • Comments:7 (2 by maintainers)

github_iconTop GitHub Comments

1reaction
Jeroen96commented, Jan 29, 2020

@tw2as Not entirely sure. But if you look up the keycloak documentation for the javascript adapter you’ll find the following:

One important thing to note about using client-side applications is that the client has to be a public client as there is no secure way to store client credentials in a client-side application. This makes it very important to make sure the redirect URIs you have configured for the client are correct and as specific as possible.

0reactions
tw2ascommented, Jan 29, 2020

thanks @Jeroen96

Read more comments on GitHub >

github_iconTop Results From Across the Web

Public and confidential client apps (MSAL) - Microsoft Entra
Learn about public client and confidential client applications in the Microsoft Authentication Library (MSAL).
Read more >
OAuth2 public clients cant use client secret and still achieve a ...
A confidential client is just a client that is preforming the authentication secretly, without any public access if you do not have the ......
Read more >
Why can't web application type 'Android' be a confidential client?
An "OAuth client" is the application which talks to the Authorization Server. In your case, you don' ...
Read more >
Cannot authorize non-confidential clients [#3173947] - Drupal
Problem /Motivation I believe there is a bug in the latest 5.x release. I cannot complete any Authorization flow for Consumers that have...
Read more >
Confidential and Public Applications - Auth0
Public applications can only use grant types that do not require the use of their client secret. They can't send a client secret...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found