Issue: Using openid-client with Keycloak - Issuer discovered Returning an Empty Object

[mr-elamin]

Issue: Using openid-client with Keycloak - Issuer discovered Returning an Empty Object

Hi everyone,

I'm trying to integrate the openid-client library with my Keycloak server, but I'm running into an issue. Here's my current setup:

'use strict'
const openidClient = require('openid-client'); // Import the entire module

const getClient = async function () {
  try {
    // Convert the URL string into a URL object
    const discoveryUrl = new URL('https://keycloak.mr-elamin.com/realms/test-realm/.well-known/openid-configuration');
    
    // Use the `discovery` method directly from the module
    const issuer = await openidClient.discovery(discoveryUrl, 'myclient', 'RmxRgJ45v04n1tvXAjgQaGbHE1UTxkpD');
    console.log('Issuer discovered:', issuer);

  } catch (error) {
    console.error('Error creating client:', error);
  }
};

getClient();

Keycloak Configuration:

• Discovery URL: https://keycloak.mr-elamin.com/realms/test-realm/.well-known/openid-configuration
• Client ID: myclient
• Client Secret: RmxRgJ45v04n1tvXAjgQaGbHE1UTxkpD

Problem:

When I run the code, the console.log('Issuer discovered:', issuer); statement returns an empty object ({}). I expected it to return the issuer metadata or configuration.

What I've Tried:

1. Verified that the discovery URL is accessible and returns valid JSON metadata.
2. Confirmed that the client ID and client secret are correct and match the Keycloak configuration.
3. Checked the openid-client documentation, but I couldn't find an example that matches my use case.

Questions:

1. Am I using the discovery method correctly? If not, what is the proper way to use it with Keycloak?
2. Is there something specific I need to configure in Keycloak for this to work?
3. Could this be an issue with the openid-client library version or my implementation?

Any help or guidance would be greatly appreciated!

here are some screenshots from the configuration of my client:

Thanks alot
Adil

[panva]

The object may appear empty but that's only a console log thing in whatever runtime you're using. Just use it as per the documentation.

[mr-elamin]

Hi @panva,

Thank you so much for your quick response!

You are absolutely right — I am receiving the implemented ConfigurationMethods and ConfigurationProperties available in the returned issuer. I now understand that the runtime may cause the object to appear empty when logged, but the expected properties are accessible as per the documentation.

As someone new to OpenID Connect, I’ll continue exploring the documentation to deepen my understanding.
Thank you again for your guidance
I really appreciate it!