Reputation: 1632
I have a backend written in Java and a frontend in ReactJS, where I am using Keycloak for authentication. My frontend handles two types of login flows:
Google Login via Keycloak Identity Provider
Direct Login via Backend
For Google login, Frontend uses keycloak-js to handle the authentication
For direct login, the Frontend communicates with the Java backend which in turn passes grant_type as password.
Since keycloak-js will not handle confidential clients, but my backend needs to handle confidential clients, my question is:
Do I need to configure two separate Keycloak clients (one for the Google login flow and another for the direct login flow) under the same realm?
How should I configure Keycloak for this scenario to properly handle both types of login under a single realm?
Upvotes: 2
Views: 38