KeyCloak: Client secret not provided in request

[cmakasy]

Hi, I installed theia cloud ide with the provided helm charts
I'm using keycloak server version 18.0.2 and I have configured the client as confidential. Than I added the client secret to the helm chart under keycloak.clientSecret="123456789"

After starting theia cloud I get the following error message:

{error: "unauthorized_client", error_description: "Client secret not provided in request"}
error
: 
"unauthorized_client"
error_description
: 
"Client secret not provided in request"

In the landing-page configuration I found the configuration as shown below and here I miss the client secret.

config.js: |
    window.theiaCloudConfig = {
      appId: "xqehKQqNPb",
      appName: "Theia Blueprint",
      useEphemeralStorage: false,
      useKeycloak: true,
      keycloakAuthUrl: "<myKeycloakUrk>",
      keycloakRealm: "<myRealm>",
      keycloakClientId: "theia",
      serviceUrl: "https://<myBaseHost>/servicex",
      appDefinition: "theia-cloud-demo",
      additionalApps: [
      ],
      logoFileExtension: "svg",
      disableInfo: false,
    };

It works fine with a public client, but I like to avoid the manual login.

Any ideas? Many thanks in advance

[jfaltermeier]

Hi,

Our default landing page is just a sample.
Since we wouldn't be able to keep the client secret secure in this sample page, we don't provide this out of the box. As far as I know, public clients should be used for browser-based applications.

However, you can easily create your own landing page:
https://theia-cloud.io/documentation/customizetheiacloud/#landing-page

You may also check the sample page (https://github.com/eclipse-theia/theia-cloud/tree/main/node/landing-page) or our internal testing page (https://github.com/eclipse-theia/theia-cloud/tree/main/node/testing-page) for reference.

Once you have your own landing page, you can use the landingPage.image Helm value to specify your custom landing page container image.