Today I Learned

Stuff I wish someone else had written down.

Keycloak login without a password

If you have an application which requires changing the user frequently, e.g. for reproducing bugs, testing or demonstrating new features, then you can make that process less tedious by defining a custom login flow, which only validates a username and requires no password:

Screenshot showing a keycloak login flow with two steps: Username Form and Username Validation

Combined with keycloak’s login_hint parameter, that makes for quite a frictionless experience. All without hacking together some awful custom auth in your application, which you must be careful to never enable in production. Of course, you must be careful that this login flow never makes it into production, too.

TAGS