Keycloak API - create client

Getting advice
1

Question: which parameter of Keycloak API is dedicated to ‘Signature Algorithm’?

2

Which “Signature Algorithm” do you mean? In creating a Client, there are several. You can set them in the attributes hash of the Client object when updating/creating:

  1. Access Token Signature Algorithm access.token.signed.response.alg
  2. ID Token Encryption Key Management Algorithm id.token.encrypted.response.alg
  3. ID Token Signature Algorithm id.token.signed.response.alg
  4. ID Token Encryption Content Encryption Algorithm id.token.encrypted.response.enc
  5. Request Object Signature Algorithm request.object.signature.alg
  6. User Info Signed Response Algorithm user.info.response.signature.alg
3

Your response is really appreciated. However none of those attributes works for me. My case:
Create new client with Client Authenticator ‘Signed Jwt’.
Authenticator and Certificate are setup correctly, but Signature Algorithm is empty. This is what I need to setup.
JSON Request:
{“name”: “Test Client 2”,“enabled”: true,“id”: “test_client_2”,“description”: “API Test 2”,“publicClient”: “false”,“protocol”: “openid-connect”,“rootUrl”: “http://localhost/8080/","adminUrl”: “http://localhost/8080/","authorizationServicesEnabled”: “false”, “attributes”:{“jwt.credential.certificate”: “QWdeR130Iyt167YnfR…”},“clientAuthenticatorType”: “client-jwt”}

Thank you.

4

A good way to figure out the representation to use is to go into the Admin UI, open your browser’s inspector to the network tab, and then do the action you want (e.g. create or update a client). The API request will appear in the list of network requests, and allow you to copy it (as curl, fetch, etc.).

5

Your advice is highly appreciated. I found it an it works!
Just FYI: the name of attribute is ‘token.endpoint.auth.signing.alg’

Thanks a lot…

6

Good to hear. And thank you for sharing the attribute you were looking for!

7

Again: thanks for your help.