3

Keycloak has 3 different clients: public, confidential and bearer.

I understand that bearer clients cannot obtain tokens and it is mainly for verification. But what confusing me is in keycloak, the bearer client can have a client secret, in which possible scenario can the client secret of a bearer can be used?

Azel
  • 345
  • 4
  • 15
  • Did you read [this](https://stackoverflow.com/questions/58911507/keycloak-bearer-only-clients-why-do-they-exist)? – Kohei TAMURA Jun 02 '20 at 13:17
  • Hello @KoheiTAMURA, yes, I saw that post. but they didn't explain how to use client secret of a bearer client (service b).. when service b is verifying the token (given by service A) with keycloak, it doesn't require client secret. I was thinking that there might be a configuration that it will require service b to pass a client secret upon verifying the token with keycloak, and this is what I am trying to find out. – Azel Jun 03 '20 at 05:00
  • Did you find an answer for that? Asking myself the same thing. – Mario B Feb 19 '21 at 09:09
  • Hi @MarioB, nope, was not able to get an answer for this one :) – Azel Feb 21 '21 at 02:50

0 Answers0