Create User API Keys

Getting advice
1

I am working on an app that is using keycloak. We have authentication working with the tokens via the GUI, but we want users to be able and create API keys that they can use with the API. We would also like for users to be able to set an expiration date for the API keys some number of months or weeks in the future.

Has anyone worked on a feature like this, or have any advice?

2

This should be pretty simple using subkeys. I can get you access or they are pretty responsive if you reach out directly.

3

The idea of using OIDC/OAuth 2.0 standards is to authenticate/authorize with tokens (usually JWT), so I recommend not using API keys :smile:.

1 Like