How to get Keycloak users via REST without admin account

You need to assign the view-users role from the realm-management client, for the desired user. That would be the configuration for the user: Then you can grab all the users from the ${keycloakUri}/admin/realms/${keycloakRealm}/users endpoint. That’s the info retrieved from the enpoint, accesed via Postman: Also, unrelated to the asked question, I strongly encourage you not … Read more

keycloak Invalid parameter: redirect_uri

What worked for me was adding wildchar ‘*’. Although for production builds, I am going to be more specific with the value of this field. But for dev purposes you can do this. Setting available under, keycloak admin console -> Realm_Name -> Cients -> Client_Name. EDIT: DO NOT DO THIS IN PRODUCTION. Doing so creates … Read more

Keycloak-gatekeeper: ‘aud’ claim and ‘client_id’ do not match

With recent keycloak version 4.6.0 the client id is apparently no longer automatically added to the audience field ‘aud’ of the access token. Therefore even though the login succeeds the client rejects the user. To fix this you need to configure the audience for your clients (compare doc [2]). Configure audience in Keycloak Add realm … Read more