Postman keycloack issuedFor

Question

I'm trying to make a request from postman to keycloack for authorization test and still getting this error:

{
    "error": "invalid_request",
    "error_description": "You must provide the issuedFor"
}

PostMan request parameters:

Postman bearer token header:

Since issuedFor is not checked in your Postman screenshot, perhaps it wasn't sent? — Ross Presser
Yes, even when i check it, i have the same result. I do not even know if it's the reale parameter keycloack is asking nor its correct anwser. — jbokobosso
You should write this into an Answer -- yes, you can answer your own question. — Ross Presser

guicassolato guicassolato · Accepted Answer · 2020-09-29T12:30:28

I know you've already picked an answer, but for the ones landing here from a web search on the Keycloak's issuedFor problem.

The root cause of the error message shown is the typo in the parameter name "audience" (not "audiance)". That nowadays would make Keycloak to fail fetching the client ID at https://github.com/keycloak/keycloak/blob/3631618b245fa768bff7009b9e87d01dd4387fe3/services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java#L330. Just fix the spelling and you should be fine.

For the record, the "audience" parameter is required in the requests to evaluate permissions as stated in the Keycloak's documentation for the Authorization Services: https://www.keycloak.org/docs/latest/authorization_services/index.html#_service_obtaining_permissions.