Demo: Keycloak setup and the authorization code + PKCE flow
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
run Keycloak and get tokens with the code flow. Prepares JNR-039-LAB1.
Draft outline details
Step by step
- Start Keycloak locally with Docker; verify image and version before recording.
- Create a realm
shop, a client with PKCE enabled, realm rolescustomerandadmin, and two users. - In Postman, use the OAuth 2.0 authorization code with PKCE option and log in.
- Decode the access token and find
iss,aud, and the roles. - Planned mistake: a wrong redirect URI in the client setup gives an "invalid redirect" error. Fix: register the exact URI.
- Compare the access token with the ID token.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.