Keycloak Client for .NET Core
A powerful and feature-rich .NET Core client library for Keycloak that simplifies integration with Keycloak's authentication and authorization services. This enterprise-ready library provides a comprehensive implementation of Keycloak's REST API, with full support for OpenID Connect, OAuth 2.0, and User-Managed Access (UMA 2.0) protocols.
Requirements
| Category | Supported Versions |
|---|---|
| .NET | 6.0, 7.0, 8.0 |
| Dependencies | ASP.NET Core, Microsoft.Extensions.DependencyInjection, Newtonsoft.Json |
Version Compatibility
| Keycloak Version | Support |
|---|---|
| 26.x | |
| 25.x | |
| 24.x | |
| 23.x | |
| 22.x | |
| 21.x | |
| 20.x |
Key Features
- Complete Keycloak REST API integration
- Robust security with OpenID Connect and OAuth 2.0
- Built-in monitoring and performance metrics
- Comprehensive error handling and debugging
- Automated token management and renewal
- Advanced user and group management
- Multiple authentication flows support
- Enterprise-grade scalability
Table of Contents
- Keycloak Client for .NET Core
- Requirements
- Version Compatibility
- Key Features
- Table of Contents
- Installation
- Getting Started
- Prerequisites
- Basic Setup
- Basic Usage
- Documentation
- Testing
- Test Documentation
- Key Testing Features
- Running Tests
- Contributing
- License
Installation
To integrate the Keycloak client library into your .NET Core application, simply add the NuGet package:
Getting Started
Prerequisites
- .NET Core SDK (version 6.0 or later)
- A running Keycloak instance
- Client credentials and realm configuration
Basic Setup
- Add the Keycloak client to your services in
Program.csorStartup.cs:
{
options.KeycloakBaseUrl = "http://localhost:8080";
options.RealmAdminCredentials = new KcClientCredentials
{
ClientId = "your-client-id",
ClientSecret = "your-client-secret"
};
});
Basic Usage
Here's a quick example of how to use the library:
var keycloakClient = new KeycloakClient("http://localhost:8080");
// Authenticate
var token = await keycloakClient.Auth.GetClientCredentialsTokenAsync(
"your-realm",
new KcClientCredentials
{
ClientId = "your-client-id",
ClientSecret = "your-client-secret"
});
// Use the token for other operations
var users = await keycloakClient.Users.GetAsync(
"your-realm",
token.AccessToken,
new KcUserFilter { Max = 10 });
Documentation
Explore our comprehensive documentation for each module:
-
- JWT Bearer Authentication
- Role Claims Transformation
- Security Best Practices
-
- UMA 2.0 Authorization
- Policy Enforcement
- Protected Resources
-
- Type-safe responses
- Error handling
- Response Models
-
- Performance tracking
- Health checks
- System diagnostics
-
- Token lifecycle
- Multiple auth flows
- Security features
-
- User operations
- Role management
- Group handling
-
- Configuration
- Service accounts
- Client scopes
Testing
Our library includes an extensive test suite ensuring reliability across multiple Keycloak versions (20.x through 26.x). The testing infrastructure leverages Docker and Ansible for automated setup and execution.
Test Documentation
-
- Test patterns
- Setup instructions
- Mock data structure
-
- Environment setup
- Configuration management
- Container orchestration
Key Testing Features
-
Version Coverage:
- Supports Keycloak 20.x through 26.x
- Automated environment setup per version
- Parallel version testing
-
Test Categories:
- Authentication flows
- Authorization mechanisms
- Client operations
- Group management
- User operations
-
Infrastructure:
- Docker-based environments
- Ansible automation
- Continuous Integration ready
- Comprehensive mock data
Running Tests
cd NETCore.Keycloak.Client.Tests
make install_virtual_env
# Run tests for all supported versions
dotnet cake e2e_test.cake
License
This project is licensed under the MIT License - see the LICENSE file for details.
Contributing
We welcome contributions from the community! Please check our Contributing Guidelines for details on:
- Branch naming conventions
- Code style and formatting rules
- Pull request process
- Security guidelines
Star us on GitHub | Report Issues | Read the Docs