I have two similar use cases in Keycloak.
Password reset
First is, I want to enable users to reset their passwords. There is already an application the users are using, so it would be nice to integrate it there. I created a small anngular module within it and tried to trigger a password forgotten mail via the same mechanism the Keycloak password forgotten form provides. But I can't figure out how they created this action link:
The execution seems to be always the same, but I have no clue where to get it in the first place.
My current solution, which works while Keycloak and the application run on the sam domain, is to request the original site from keycloak, extract the link and after the user enters the username make a post request to that URL. But that is a little bit dirty :)
Is there a "correct" way to do that?
Initial Password
The second question is about creating users in an admin area and send an initial mail to set a password. I could use the method from above to trigger a mail. But it not good that the mail says password forgotten while they realy have to set the password for the first time. I tried to set required actions in the users REST representation, but it seems that this triggers no mail.
Are required actions to intened way to do that? Did I miss a feature?
Aucun commentaire:
Enregistrer un commentaire