Token Exchange By User Email

[gustavohfelixs]

Hello czetsuyatech! I recently watched your video about this repo and was really helpful to understand keycloak exchange but now i'm trying to do a token exchange by user email.

I'm building an app that can make appointments in google agenda and I faced a problem have muiltiple user token and refresh_tokens for consume google API. Some friend told me about keycloak and it capacibility to have identity provider login with google and store tokens of users.

My app is a backend node app and i dont want user logging each time for making agenda changes just login once and automate the rest.

Can u help me please?

[czetsuya]

Hi Gustavo,

That is the use case for that repo wherein you limit the login by exchanging tokens.

Did you try to run the project and see how it behaves?

[gustavohfelixs]

Hi Gustavo,

That is the use case for that repo wherein you limit the login by exchanging tokens.

Did you try to run the project and see how it behaves?

Hello Ed, thank u for answer! I tried this repo, created the keycloak realm, client and implemented the identity provider with login by localhost:8081 using your java Spring boot app. But the problem that i saw was that the user needs to be logged (with session in browser) to be able use the google api, please correct me if i'm wrong.

What i needing for this personal project is exchange my user information (token, refresh_token) to make changes in the user agenda while in my backend that dont have session. I want to user log once and it be able to make appointments and my app be a multi tenancy google agenda consumer doing appointments for muiltiple users.

I dont know if this is the best way to do that. But here is the idea:

• User login in my web app (Keycloak with Google)
• user send a notification in a webhook
• BackEnd Webhook receives the appointment
• Recover user token
• Create a appointment in user agenda

---

[czetsuya]

Hi @gustavohfelixs there should be an endpoint in oauthController to save the access and refresh tokens that you can use later to initialize the Google services. You can use the refresh token to regenerate a new pair.