Environment: Keycloak 18 or 19 (just upgraded to 19) Error: I have an android application with a pre-defined client-id and a pre-defined client secret (see [image] OpenID Connect (OIDC) OpenID Connect (OIDC) I would like to enter this client into my realm, …

Hello, I haven had this issue before, but what I get from the logs provide is… Failed to verify remote host : 87.154.171.4 Operation ‘before register client’ rejected. Policy ‘Trusted Hosts’ rejected request to client-registration service. Details: Host not trusted. By chance is there certificat…

Keycloak is running behind a haproxy load balancer which is used for ssl termination. I use proxy=edge, as described in Using a reverse proxy - Keycloak . And I saw that I did not finish the config for this correctly yet, as described in Using a reverse proxy - Keycloak I now added the “Enable the c…

And now I see the reason why I can not connect with the android app: 2022-08-27 08:03:10,758 WARN [org.keycloak.events] (executor-thread-11) type=REFRESH_TOKEN_ERROR, realmId=netzwissen, clientId=e4rAsNUSIUs0lF4nbv9FmCeUkTlV9GdgTLDH1b5uie7syb90SzEVrbN7HIpmWJeD, userId=null, ipAddress=87.183.227.22…

[image] thommierother: But when creating clients, I still dont see an option to select “confidential client” and enter any pre-defined credentials This is odd, What I just noticed & comparing it to mine was that yours States “Create Client” and mine KC “19.0” shows Add client. [image] Have…

Hmmmm, the whole UI looks different here with KC 19.01: [image] For the flows I have these options: [image] But there may be another option (more or less a “workaround”): it is possible to import the client settings from a json file. This link describes how to import client settings with a pre…

Oh wow, yeah the whole Web UI looks different. [image] thommierother: I will try this and keep you updated :+1:

I could solve my problem and its much easier than I thought: There are config examples for keycloak as an IDP for owncloud, provided as json in ocis/deployments/examples/ocis_keycloak/config/keycloak at master · owncloud/ocis · GitHub Your can edit these examples, add the correct client secret…

Client Authentication is the new public/confidential “switch” for clients in the latest version. It also causes CODE_TO_TOKEN_ERROR with invalid_client_credentials message and might produce 400, 401, or 403 error code depending on the browser and UI. I solved it thanks to this thread. Everything wo…

Hi All Simply, follow the below steps: from “Settings” tab, you can turn on “Client authentication” property. [1] After enabling it, two new tabs “Keys” and “Credentials” will be appeared. Now, you can get “Client secret” from Credentials tab.

Client access type: can't edit the client secret entry

Getting advice

gsmith August 29, 2022, 10:59pm 5

This is odd, What I just noticed & comparing it to mine was that yours States “Create Client” and mine KC “19.0” shows Add client.

Have you tried just to create the client and go back in to adjust it?

Topic		Replies	Views
Keycloak 19.0.2, lua-resty-openidc and invalid_request Getting advice authentication , oidc	7	3928	September 28, 2022
Access type confidential causes CORS problems with keycloak.js Securing applications	1	585	October 15, 2020
Unable to authenticate using nodejs client Securing applications	1	854	November 22, 2021
Forbidden - cannot change realm settings as admin Configuring the server admin-console	1	743	August 19, 2021
Cannot retrieve realm keys with Spring Boot client Securing applications	3	4416	August 19, 2021

Client access type: can't edit the client secret entry

Related topics