How can I update a Keycloak password from the REST API (PUT method)?

Question

I set up a keycloak server with LDAP users to take advantage of the SSO on my applications. I would like to change the password of the logged in user on my application through the Keycloak API. So, in the future, my Angular application will be able to make a request to the keycloak API to change the password of the logged-in user.

So I tried to do what is indicated in the documentation (method PUT, reset-password) but without success ... I did my tests with postman, I wonder if my token is the one to be used? Does the problem come from elsewhere?

I have this url : PUT {url}/auth/admin/realms/{realm}/users/{id user}/reset-password/

I have this header :

Content-type application/json

i have this body :

{
    "pass" : {
        "type": "password",
        "temporary": false,
        "value": "my-new-password"
    }
}

I get a 401 error if I did not try to renew the token quickly (which makes me say that the problem may not come from the token) and I get a 403 or 400 error when I got a new token via postman oAuth 2.0

I sometimes get this message:

Unrecognized field "pass" (class org.keycloak.representations.idm.CredentialRepresentation), not marked as ignorable

Please, help me !

You can see here my autorization in postman, i don't know what is "State"

:-) try this and let us know... https://stackoverflow.com/a/71091248/8605229 — GerardNorton, Feb 12 '22 at 11:05

score 5 · Answer 1 · answered Aug 06 '19 at 04:12

5

Body of PUT Should be CredentialRepresentation, which is

{
  "type":"password",
  "value":"my-new-password",
  "temporary":false
}

answered Aug 06 '19 at 04:12

ravthiru

8,878
2
43
52

Just tested this and it is the only option despite what official documentations suggest. – simultsop Apr 23 '21 at 04:24

score 3 · Answer 2 · answered Nov 20 '20 at 09:08

You can use POST method with these parametes:

URL:

http://[Server Address]/auth/admin/realms/[Realm Name]/users

Headers:

Content-Type application/json

Body:

{
    "username": "test",
    "firstName": "test",
    "lastName": "test",
    "email": "test@gmail.com",
    "enabled": true,
    "credentials": [{
        "type": "password",
        "value": "123456",
        "temporary": false
    }]
}

KhalidAlsayed · Answer 3 · 2022-09-23T20:24:06.643

0

Change pass to credentials.

it’s better to check current password to increase the security

edited Sep 23 '22 at 20:24

answered Sep 19 '22 at 20:29

KhalidAlsayed

13
1
2

How can I update a Keycloak password from the REST API (PUT method)?

3 Answers3