Keycloak support in Angular #37234

Before reporting an issue

• I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

docs

Describe the bug

Hi team,

We plan to migrate from msal from azure ad in angular to use Keycloak as identity broker and azure ad as identity provider.
Please let us know, which packages is recommended/supported by keycloak team to use it in angular.

I am currently using keycloak-angular in Angular17.
After logging in into the my application using keycloak with check-sso. I have different clients in my application. When i switch the client, i need to get a new access for the same front clientid with different scope(specific to the client). Basically this scope will return corresponding roles for that client in keycloak. I am using "/realms//protocol/openid-connect/token" with grant_type="refresh_token". But still it return the token with same scope as, while login In. Do i need to use token exchange approach?. Here the token generation should be same client but on different scopes. Please help me to address this. Thanks a lot.

Version

24.0.1

Regression

• The issue is a regression

Expected behavior

I can able to generate a new access token with different scope for the same client using grant_type as refresh_token

Actual behavior

Newly generated access token containing the same scope.

How to Reproduce?

Generate a token using authorization code flow, Using the generated refresh token, request a new access token with different scope with grant_type as "refresh_token"

Anything else?

No response