keycloak example

readme.md

docker run -p 8080:8080 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=admin quay.io/keycloak/keycloak:24.0.4 start-dev

1. Create confidential client test (no special settings)
2. Create public client front (no special settings)
3. Create user in KC with username abc and set NON TEMPORARY password for him abc
4. Get KC token

curl --request POST \
  --url http://localhost:8080/realms/master/protocol/openid-connect/token \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data client_id=front \
  --data username=abc \
  --data password=abc \
  --data grant_type=password

5. Try API

curl --request GET \
  --url http://localhost:5236/ \
  --header 'Authorization: Bearer TAKE_ACCESS_TOKEN_FROM_ABOVE'

6. Response: Hello abc!

appsettings.json

{
  "Keycloak": {
    "realm": "master",
    "auth-server-url": "http://localhost:8080/",
    "ssl-required": "none",
    "resource": "test",
    "verify-token-audience": false,
    "credentials": {
      "secret": "BuIpbumh0dAX8oaRP83MctDtIXQk28GC"
    },
    "confidential-port": 0
  },
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft.AspNetCore": "Warning"
    }
  },
  "AllowedHosts": "*"
}

example.csproj

<Project Sdk="Microsoft.NET.Sdk.Web">

    <PropertyGroup>
        <TargetFramework>net8.0</TargetFramework>
        <Nullable>enable</Nullable>
        <ImplicitUsings>enable</ImplicitUsings>
    </PropertyGroup>

    <ItemGroup>
      <PackageReference Include="Keycloak.AuthServices.Authentication" Version="2.4.1" />
      <PackageReference Include="Keycloak.AuthServices.Common" Version="2.4.1" />
    </ItemGroup>

</Project>

program.cs

using System.Security.Claims;
using Keycloak.AuthServices.Authentication; 

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddKeycloakWebApiAuthentication(builder.Configuration); 
builder.Services.AddAuthorization(); 

var app = builder.Build();

app.UseAuthentication(); 
app.UseAuthorization(); 

app.MapGet("/", (ClaimsPrincipal user) => $"Hello {user.Identity!.Name}!").RequireAuthorization(); 

app.Run();