Keycloak OTP Validation API

openidc_otp_validation.sh

BASE_URL=https://localhost:8081/auth
CLIENT_ID=curl-test
CLIENT_SECRET=
USERNAME=
PASSWORD=
REALM=validation-test
OTP_CODE=027253

# OpenID Access Token via "Resource Owner Password Credentials Grant"
# https://tools.ietf.org/html/rfc6749#section-4.3
ACCESS_TOKEN=$(curl -s scope=openid \
  	--data-urlencode client_id=$CLIENT_ID \
   --data-urlencode client_secret=$CLIENT_SECRET \
  	-d grant_type=password \
  	--data-urlencode username=$USERNAME\
  	--data-urlencode password=$PASSWORD \
   $BASE_URL/realms/$REALM/protocol/openid-connect/token \
	  | python -c 'import sys, json; print json.load(sys.stdin)["access_token"]')

## Validate otp token with custom credential validation endpoint
curl -v \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d "[{"\""type"\"":"\""totp"\"","\""value"\"":"\""$OTP_CODE"\""}]" \
  $BASE_URL/realms/$REALM/credential-validation