# Enable account-api in docker **URL:** \ **Category:** Configuring the server\ **Created:** [March 4, 2022, 2:34pm UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039 "2022-03-04T14:34:42Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![domdeger](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/domdeger/32/5238_2.png) [@domdeger](https://forum.keycloak.org/u/domdeger)\ **Post date:** [March 4, 2022, 2:34pm UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/1 "2022-03-04T14:34:42Z")
Hello together, i’d like to enable and use the account-api feature of keycloak but I have problems to enable it. If I try and GET [http://localhost:8080/auth/realms/master/account](http://localhost:8080/auth/realms/master/account) the following error is returned: ```auto { "error": "RESTEASY003210: Could not find resource for full path: http://localhost:8080/auth/realms/master/account" } ``` I am using following docker container to run keycloak. ```auto keycloak: image: 'quay.io/keycloak/keycloak:17.0.0' command: start-dev --hostname-strict false links: - "db:db" environment: KC_DB: 'postgres' KC_FEATURES: 'account-api' KC_FEATURES_ACCOUNT_API: 'enabled' #KC_DB_SCHEMA: 'keycloak' ``` Do you have any idea what I am missing. Is there a way to list all enabled features? Best regards, Dominik ---
**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\ **Post date:** [March 4, 2022, 3:00pm UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/2 "2022-03-04T15:00:53Z")
Most likely [Using curl or POSTMAN results in Could not find resource for full path - #2 by dasniko](http://forum.keycloak.org/t/using-curl-or-postman-results-in-could-not-find-resource-for-full-path/13638/2) ---
**Author:** ![domdeger](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/domdeger/32/5238_2.png) [@domdeger](https://forum.keycloak.org/u/domdeger)\ **Post date:** [March 7, 2022, 7:32am UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/3 "2022-03-07T07:32:23Z")
Thank you Niko you were right. Is there any documentation about the account api? I want to change the current users password via a rest api call form my own application. The only thing I found was this blog post: [Using the Keycloak Accounts Management API | Marcus Povey (marcus-povey.co.uk)](https://www.marcus-povey.co.uk/2020/10/12/using-the-keycloak-accounts-management-api/) But the post on account/credentials/password always runs into a 405. ---
**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\ **Post date:** [March 7, 2022, 7:51am UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/4 "2022-03-07T07:51:37Z")
Modifying the credentials via REST API is not supported due to security reasons. The user is only allowed to change its credentials itself using the secure IdP (Keycloak) UI. Otherwise you are creating a man-in-the-middle scenario, which is most likely not what you want. Generally, users should only enter their credentials on the secure server UI - the IdP, Keycloak. ---
**Author:** ![domdeger](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/domdeger/32/5238_2.png) [@domdeger](https://forum.keycloak.org/u/domdeger)\ **Post date:** [March 7, 2022, 7:59am UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/5 "2022-03-07T07:59:34Z")
I expected this 😕 So I am implementing keycloak for an legacy application which authenticates via password grant. It has already a user profile page where the user should be able to change her/his password. Also the users should be forced to change the password after first login. Sounds like we cannot use password grant at all if we want to achieve this, right? ---
**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\ **Post date:** [March 7, 2022, 8:02am UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/6 "2022-03-07T08:02:35Z")
ROPC (aka “Direct Access Grant” or “Pasword Grant”) ist deprecated and MUST NOT be used, according to [draft-ietf-oauth-security-topics-18](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics-18#section-2.4) It’s highly insecure. Using new systems and tools always bring the chance (or need) to change your environment to a more secure one. Never think in terms of “it should be exactly like it is/was”. If so, you don’t have the need to change anything. ---
**Author:** ![domdeger](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/domdeger/32/5238_2.png) [@domdeger](https://forum.keycloak.org/u/domdeger)\ **Post date:** [March 7, 2022, 8:13am UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/7 "2022-03-07T08:13:51Z")
Thank you for the clarification 🙂 I’ll discuss this with my stakeholders. ---
**Author:** ![linlinwen](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/linlinwen/32/5913_2.png) [@linlinwen](https://forum.keycloak.org/u/linlinwen)\ **Post date:** [May 26, 2022, 3:22pm UTC](https://forum.keycloak.org/t/enable-account-api-in-docker/14039/8 "2022-05-26T15:22:09Z")
Hi dasniko，I want to get linked-accouts by postman, but return with the same error. but in IdP Keycloak UI it is ok, must we have to access it in IdP (Keycloak) UI? the url is: [http://localhost:8080/realms/smsb/account/linked-accounts](http://localhost:8080/realms/smsb/account/linked-accounts), and I saw a test case using [http://localhost:8080/auth/realms/smsb/account/linked-accounts](http://localhost:8080/auth/realms/smsb/account/linked-accounts).