Keycloak error invalid_client Bearer only not allowed

java rest http keycloak
user840930 picture user840930 · Sep 19, 2018 · Viewed 7.4k times · Source

I'm trying to deploy a very simple REST service secured with keycloak and am getting the following error:

Caused by: org.keycloak.authorization.client.util.HttpResponse.Exception: Unexpected response from server: 400 / Bad Request / Response from server: ("error":"invalid_client","error_description":"Bearer-only not allowed")

What does this error mean? How can I fix it?

Answer

tryingToLearn picture tryingToLearn · Sep 20, 2018

Since you have not shared your keycloak config, I am guessing the above error is because you created a bearer only client in keycloak. Keycloak doesn't allow "bearer only" clients to obtain tokens from the server. Try to change your client to "confidential" on the server and set bearer-only on your adapter configuration (keycloak.json).

You can refer this thread for more info: http://keycloak-user.88327.x6.nabble.com/keycloak-user-can-we-use-authorization-with-bearer-only-td2123.html

Related questions

REST - HTTP Post Multipart with JSON

I need to receive an HTTP Post Multipart which contains only 2 parameters: A JSON string A binary file Which is the correct way to set the body? I'm going to test the HTTP call using Chrome REST console, so I'm …

Read More
How to add parameters to all HttpClient request methods?

I am writing some Java code that uses Apache HttpClient version 4.2.2 to hit a RESTful 3rd party API. This API has methods that utilize HTTP GET, POST, PUT and DELETE. It's important to note that I'm using a 4.x.x …

Read More
Using Spring REST template, either creating too many connections or slow

I have a RESTful service that works very fast. I am testing it on localhost. The client is using Spring REST template. I started by using a naive approach: RestTemplate restTemplate = new RestTemplate(Collections.singletonList(new GsonHttpMessageConverter())); Result result = restTemplate.…

Read More