Authentication Endpoints¶

Endpoints for authentication via Keycloak integration.

POST /auth/login
Content-Type: application/json

{
    "username": "user",
    "password": "***"
}

Obtains access and refresh tokens using Keycloak's password grant flow.

Response:

{
  "access_token": "eyJ...",
  "expires_in": 300,
  "refresh_token": "eyJ...",
  "token_type": "Bearer"
}

Validate Token¶

GET /auth/token/validate
Authorization: Bearer <token>

Validates a Keycloak JWT token and returns its payload with client roles.

Response:

{
  "valid": true,
  "payload": {
    "exp": 1700000000,
    "iat": 1700000000,
    "sub": "user-id",
    "client_roles": ["webadminsimple"]
  }
}