Sessions with no associated clients

Getting advice
1

I am using Keycloak 23.0.7.

When I am listing the user sessions I get sessions that do not seem to have an associated client. How is this possible? I am afraid that is due to some session corruption but it is not easy to verify.

For the record, I am running Keycloak from a (single) docker image and configured it to use a local cache. However I am bit confused about the various “sessions” that exist

  • sessions (using a file store)
  • authenticationSessions (using a file store, but how they differ from sessions?)
  • clientSessions (using simple store, but again how they different from the other sessions).

So in sort

  • Does anybody have any idea what it means to have sessions with no associated clients?
  • Does anybody have any idea on how I can check if the session caching is corrupted?
  • Does anybody know of the difference between the various sessions and their relationship to one another?

Thanks in advance

2

Every authenticated user has a UserSession.
During authentication, e.g. doing things in the browser, there is an AuthenticationSession.
For each client Keycloak issues a token for a user, the user gets a ClientSession. A user can have multiple ClientSessions in one UserSession.

3

So, if a user always logs in via a client, how can I have sessions with no associated client?