Keycloak Python Recruiting Challenge

This challenge affects the Keycloak Admin REST API. You can use the documentation or capture the requests using the development tools of your browser, that uses the same API.

The repository only contains a ugly, quick and dirty python script, that (after pasting your 'Secret') lists the names of all existing realms on your Keycloak server.

For the tasks below you can use this script to get on board or you can start by your own. You can use for your solution, one or several scripts, classes and modules or whatever you want. Do it the way you want.

There is no right solution and we do not expect a solution that is ready for production. We want to see how you act and solve the tasks.

If it takes to much time, do not complete all tasks.

Preparation

Keycloak

• Download Keycloak Server from https://www.keycloak.org/downloads. It is your choise, whether you prefer the zip or the docker image.
• Run the server and open the web GUI.
• As username and password for the initial admin user use admin:admin
• Within the Keycloak Administration Console navigate to 'Clients' -> 'admin-cli' -> 'Credentials'. Copy the 'Secret'.

Github

• Fork this repository
• Clone your repository

Python

• Download and install python 3.6.x or higher
• Install the requests module python -m pip install requests

Tasks

1. The response of authentication request includes an access, id and refresh token. All three of them are Json Web Tokens (JWT). We are intrested in the id token. Please show the body of the token in a human readable way.

2. Create three realms and whithin each realm a client with any configuration.

3. Add another redirect URI to one of the clients.

4. Delete one of the clients.

5. Detect that the client is missing and add it again.

Final

Make a PULL request with your code.