Getting access to API 2.0

To retrieve an authorization token for Rest calls, send a POST request to  `https://keycloak.staging-adhese.org/realms/adhese-guineapig/protocol/openid-connect/token` with the parameters:

• username
• password
• client_id=adhese-app
• grant_type=password

Using curl:

curl --location 'https://keycloak.staging-adhese.org/realms/adhese-guineapig/protocol/openid-connect/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_id=adhese-app' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username=username' \
--data-urlencode 'password=password'

You will get back an access token:  

{
    "access_token": "123456",
    "token_type": "bearer",
    "expires_in": 42237,
    "scope": "read write"
}

To execute Rest requests that require authorization, add an Authorization header with value Bearer <access_token>, where <access_token> is the access_token returned by the above request and add an Use-Keycloak-Auth header with value true

curl --location 'https://guineapig.staging-adhese.org/api/users/me' \
--header 'Use-Keycloak-Auth: true' \
--header 'Authorization: Bearer <access_token>'