[英]Access the keycloak API from postman
I have tried to access the keycloak API from the postman.我试图从邮递员那里访问 keycloak API。 but it is showing 400 bad request.
但它显示 400 个错误的请求。
I was calling api in the below format.我正在以以下格式调用 api。
http://{hostname}:8080/auth/realms/master/protocol/openid-connect/token?username=admin&password=admin&client_id=admin-cli&grant_type=password
In the headers I have set the content_type as application/x-www-form-urlencoded
在标题中,我将
content_type as application/x-www-form-urlencoded
设置content_type as application/x-www-form-urlencoded
I am getting the response as below.我收到如下回复。
{
"error": "invalid_request",
"error_description": "Missing form parameter: grant_type"
}
Can any one help me.Any help will be appreciated.任何人都可以帮助我。任何帮助将不胜感激。 thanks in advance
提前致谢
You call API through POST client您通过 POST 客户端调用 API
URL - http://localhost:8080/auth/realms/Demo/protocol/openid-connect/token URL - http://localhost:8080/auth/realms/Demo/protocol/openid-connect/token
So here in above url i am using Demo
as my realm instead of master
.所以在上面的 url 中,我使用
Demo
作为我的领域而不是master
。
ContentType - "Content-Type":"application/x-www-form-urlencoded" ContentType - "Content-Type":"application/x-www-form-urlencoded"
Params :参数:
{
"client_secret" : "90ec9638-7647-4e65-ad20-b82df3341084",
"username" : "ankur",
"password" : "123456",
"grant_type" : "password",
"client_id": "app-client"
}
Set Header as below设置标题如下
The URL you are using is to obtain the token.您使用的 URL 用于获取令牌。
The token request should be a POST call, the request you post is a GET request.令牌请求应该是 POST 调用,您发布的请求是 GET 请求。 Below a CURL example about how to request the
access_token
下面是关于如何请求
access_token
的 CURL 示例
curl -X POST \
http://{hostname}:8080/auth/realms/{realm}/protocol/openid-connect/token \
-H 'Content-Type: application/x-www-form-urlencoded' \
-d 'username=admin&password=admin&grant_type=password&client_id=admin-cli'
did I create a Postman collection to help us to get start with keycloak API.我是否创建了一个 Postman 集合来帮助我们开始使用 keycloak API。 Anyone can save the follow json, and import on Postman:
任何人都可以保存以下 json,并在 Postman 上导入:
{
"info": {
"_postman_id": "07a9d691-5b1c-4869-990b-551da29590fe",
"name": "Keycloak",
"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
},
"item": [
{
"name": "GET REALM",
"request": {
"method": "GET",
"header": [],
"url": {
"raw": "{{KEYCLOAK_URL}}admin/realms/{{KEYCLOAK_REALM}}",
"host": [
"{{KEYCLOAK_URL}}admin"
],
"path": [
"realms",
"{{KEYCLOAK_REALM}}"
]
}
},
"response": []
},
{
"name": "GET USERS",
"event": [
{
"listen": "prerequest",
"script": {
"id": "dfda403a-35b8-4704-840d-102eddac32e6",
"exec": [
""
],
"type": "text/javascript"
}
}
],
"protocolProfileBehavior": {
"disableBodyPruning": true
},
"request": {
"method": "GET",
"header": [],
"body": {
"mode": "urlencoded",
"urlencoded": []
},
"url": {
"raw": "{{KEYCLOAK_URL}}admin/realms/{{KEYCLOAK_REALM}}/users",
"host": [
"{{KEYCLOAK_URL}}admin"
],
"path": [
"realms",
"{{KEYCLOAK_REALM}}",
"users"
]
}
},
"response": []
}
],
"auth": {
"type": "bearer",
"bearer": [
{
"key": "token",
"value": "{{KEYCLOAK_TOKEN}}",
"type": "string"
}
]
},
"event": [
{
"listen": "prerequest",
"script": {
"id": "c3ae5df7-b1e0-4af1-988b-c592df3fd98e",
"type": "text/javascript",
"exec": [
"const echoPostRequest = {",
" url: pm.environment.get('KEYCLOAK_URL') + 'realms/master/protocol/openid-connect/token',",
" method: 'POST',",
" header: 'Content-Type:application/x-www-form-urlencoded',",
" body: {",
" mode: 'urlencoded',",
" urlencoded: [",
" {key:'username', value:pm.environment.get('KEYCLOAK_USER')}, ",
" {key:'password', value:pm.environment.get('KEYCLOAK_PASSWORD')}, ",
" {key:'client_id', value:'admin-cli'}, ",
" {key:'grant_type', value:'password'}",
" ]",
" }",
"};",
"",
"var getToken = true;",
"",
"if (!pm.environment.get('KEYCLOAK_TOKEN_EXPIRY') || ",
" !pm.environment.get('KEYCLOAK_TOKEN')) {",
" console.log('Token or expiry date are missing')",
"} else if (pm.environment.get('KEYCLOAK_TOKEN_EXPIRY') <= (new Date()).getTime()) {",
" console.log('Token is expired')",
"} else {",
" getToken = false;",
" console.log('Token and expiry date are all good');",
"}",
"",
"if (getToken === true) {",
" pm.sendRequest(echoPostRequest, function (err, res) {",
" console.log(err ? err : res.json());",
" if (err === null) {",
" console.log('Saving the token and expiry date')",
" var responseJson = res.json();",
" pm.environment.set('KEYCLOAK_TOKEN', responseJson.access_token)",
" ",
" var expiryDate = new Date();",
" expiryDate.setSeconds(expiryDate.getSeconds() + responseJson.expires_in);",
" pm.environment.set('KEYCLOAK_TOKEN_EXPIRY', expiryDate.getTime());",
" }",
" });",
"}"
]
}
},
{
"listen": "test",
"script": {
"id": "fdb69bb4-14a5-43b4-97e2-af866643e390",
"type": "text/javascript",
"exec": [
""
]
}
}
],
"variable": [
{
"id": "698bbb41-d3f9-47f8-9848-4a1c32f9cca4",
"key": "token",
"value": ""
}
],
"protocolProfileBehavior": {}}
And I created a pre-script to get the token and set on wich request, as you can see on the image below:我创建了一个预脚本来获取令牌并根据请求进行设置,如下图所示:
You should create the follow environment variables: KEYCLOAK_USER, KEYCLOAK_PASSWORD and KEYCLOAK_URL, where the url must be https://{your keycloak installation}/auth/您应该创建以下环境变量:KEYCLOAK_USER、KEYCLOAK_PASSWORD 和 KEYCLOAK_URL,其中 url 必须是 https://{your keycloak installation}/auth/
也可以使用 CURL 来获取信息
curl -L -X POST 'http://<serveraddress>/auth/realms/<realmname>/protocol/openid-connect/token' -H 'Content-Type: application/x-www-form-urlencoded' --data-urlencode 'client_id=<clientid>' --data-urlencode 'grant_type=password' --data-urlencode 'client_secret=<clientsecret>' --data-urlencode 'scope=openid' --data-urlencode 'username=<username>' --data-urlencode 'password=<password>'
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.