javascript - Get client session id from Keycloak access token - Stack Overflow

admin管理员组

文章数量:1356273

In reference to Keycloak's documentation for account linking, I need to fetch user session id and client session id from the access token.

However, I only find something they call session_state on the token which apparently is the same as sessionId by looking at their javascript adapter source code.

I reckon that this is the user session id they are referring to? If so, where do I find this so called client session id?

In reference to Keycloak's documentation for account linking, I need to fetch user session id and client session id from the access token.

However, I only find something they call session_state on the token which apparently is the same as sessionId by looking at their javascript adapter source code.

I reckon that this is the user session id they are referring to? If so, where do I find this so called client session id?

• javascript
• openid-connect
• keycloak

Share Improve this question Follow asked Oct 13, 2017 at 13:03 PetterPetter 78322 gold badges99 silver badges1919 bronze badges 2

• Got the same problem. Did you find a solution? – noircc Commented Jan 25, 2018 at 13:57
• 1 Yup! Turned out it as the client id. So something like this should work: Extract user session id and client session id ("aud" is the client id) from access token: const { session_state, aud } = JSON.parse(decodeURIComponent(escape(atob(accessToken.split('.') [1])))) Create base64 hash: Base64.stringify(sha256(nonce + session_state + aud + 'facebookOrWhatever')) You also need make the resulting base64 encoded hash url friendly (i.e. '+' and '/' are replaced with '-' and '_' also remove any trailing '=' characters) – Petter Commented Jan 26, 2018 at 12:28

Add a ment  | 

1 Answer 1

Sorted by: Reset to default 5

Turned out it as the client id. So something like this should work:

Extract user session id and client session id ("aud" is the client id) from access token:

const { session_state, aud } = JSON.parse(decodeURIComponent(escape(atob(accessToken.split(‌​'.') [1])))) 

Create base64 hash:

Base64.stringify(sha256(nonce + session_state + aud + 'facebookOrWhatever')) 

You also need make the resulting base64 encoded hash url friendly (i.e. '+' and '/' are replaced with '-' and '_' also remove any trailing '=' characters)

本文标签： javascriptGet client session id from Keycloak access tokenStack Overflow