Search code examples
keycloakkeycloak-javascript

Keycloak - Client Roles - Retrieve custom attributes

I have created a client role as special_agent and have added two attributes as approve_leave and raise_leave.

Keycloak - Client Role Attributes

I'm using the Javascript adapter and am able to login successfully on my website. I'm also able to receive the client role that I have assigned to the user. I, however, want to get the custom attributes specified in the client role. Below is the result of the keycloak.tokenParsed

Keycloak - tokenParsed

Is there a way to retrieve client role attributes? I looked for the Mappers in the Client settings, but couldn't figure out the details.

Solution

  • You can get the Client's role and attribute by API call. GET /{realm}/clients/{id}/roles/{role-name}

    Example for)

    enter image description here

    There are a couple of requirements. #1 User(agency_user) should assigned two roles(manage-realm, view-clients) in Keyclaok UI enter image description here

    #2 get access token by API and save into Postman variable http://127.0.0.1:8080/auth/realms/test/protocol/openid-connect/token Client id & secret get from Keyclaok UI as attached enter image description here enter image description here enter image description here

    #3 You should know the client ID by GET client API using #1 access token http://127.0.0.1:8080/auth/admin/realms/test/clients enter image description here

    More detail information, Good Luck! https://www.keycloak.org/docs-api/11.0/rest-api/index.html#_roles_resource