in keycloak how to change the password of an authenticated user - keycloak

In the keycloak administration, if I set the "Required User Action" of a user to "Update Password". The user is asked for a new password after a successful login, calling:
https://SERVER/auth/realms/REALM/login-actions/required-action?execution=UPDATE_PASSWORD&client_id=CLIENT_ID&tab_id=TAB_ID
Calling this URL with a user logged-in but not configured "Update Password" I get a message "User is already logged in".
What would be the correct URL to call from an external application, e.g. from a menu with actions edit-profile, change-password...
Edit: In our application we authenticate users managed in keycloak. We would like to be able to link a keycloak page (similar as the one posted) where the user can update/change his password (e.g. old-pw, new-pw, confirm-pw).

This answer is based on Keycloak 12 (latest version at the time of writing the answer)
You can ask users to change their profile details or passwords from the manage account section. You can get the URL of that screen and direct users to that.
"manage account" link location
Account management screen

Related

Keycloak: user is automatically logged in after submitting the registration form

I am using keycloak 7.0.1 and I have enabled the Resigtration link in the login page. My use case is the following:
Upon Registration a User should be created as disabled.
Admin user verifies the account then enables the user manually
The problem is that the user is automatically logged in after finishing registration. Any idea how to prevent this? (I also don’t need to enable any further steps e.g. verify email)
In keycloak mailing lists and also in the following post, it is said that automatic login is the default behavior, so is there anyway to change this?
Keycloak automatic login after email confirmation with disabled user

Login to Facebook from another application

I have a windows application. Users will login to my windows application. Once logged in, there will be a button as "Login to Facebook". The logged in users username and password for facebook is already stored in my DB and i can retrieve that information.
What I need is, once the user clicks on the "Login to Facebook" button, it should automatically go to facebook page with the User logged in by providing the Username and Password retrieved from my DB.
If this is not do-able, upon clicking the button, it should open the facebook login page and enter the Username and Password values retrieved from DB in their relevant textboxes.
This is a research project for my studies. Appreciate your help on this.
You need to go through the following to understand the facebook's login flow
https://developers.facebook.com/docs/facebook-login/web
For manualy building the login flow go through this
https://developers.facebook.com/docs/facebook-login

Customized facebook login page

Can we customize facebook login/authentication page?
I want to use my own customized pop up for receiving 'Email' and 'Password' input from user so that it is consistent with the GUI of my application. Is there a facebook API to which I can pass the Email/Password details received from user?
Looking at https://developers.facebook.com/docs/reference/api/user/#permissions you cannot "create" new permissions. This has to go through Facebook so they know what permissions have been granted. This ensures that you're not just granting permissions on behalf of a user without them having actively granted them. This therefore stands to reason that you cannot style their page.
Alternatively, you could just make sure users register via an account on your site (You want a password so I assume you don't mean their facebook password) and then ask them to connect their facebook account to it. You would need to ask for their email in your form, get them to login, then connect via facebook and associate their facebook id with their account on your site.

How to login using FaceBook test users (created from the facebook developer app roles page)

Is it possible to login to facebook directly (facebook.com) using the test user account created using the Facebook Developer app feature (Roles / Create test users)? What password should I use? I understand we can use the "Switch to " option after logging in as myself to facebook, but I want to be able to login directly using the test user accounts, so that I can provide these user details for other testers who do need to use their personal facebook account in any way related to the testing of the application.
Yes, we can login directly facebook(facebook.com) with test user accounts.
Step 1
Create test user by clicking Add button
Step 2
Click Edit button where have all option
Change name
Set Password
Generate access token etc.
You can simply change the password of the Test User by issuing a POST request to this URL
https://graph.facebook.com/TEST_USER_ID?password=NEW_PASSWORD&name=NEW_NAME&method=post&access_token=APP_ACCESS_TOKEN
Then you can give other people the account info of that user with the newly set password and they can log in to Facebook as that user.

How to synchronise with facebook that username & password are valid or not?

I am creating an application in which I am trying to add facebook account in app. What I wish to do is when user enter his/her username and password my application should call some facebook api or any other thing by which it will confirm that the user credentials are correct for facebook.
Then the API will return some message by which I can add account or give an alert that credentials are not right.
it is not possible to login using the username/password directly to the api.
use facebook connect instead.