Get the current user
Header Parameters
Keycloak access token (OAuth2). Replace [HOST] and [YOUR_REALM] with the values of your installation. OAuth2 flows: Implicit (authorization URL: https://[HOST]/realms/[YOUR_REALM]/protocol/openid-connect/auth)
Response
The current user.
Response Attributes
Time the user object was built for this request.
Keycloak realm, used as tenant id.
User's preferred username (e.g. email or UPN)
Display name.
E-mail address (claims email, unique_name or upn).
First name.
Last name.
Keycloak realm roles from realm_access.roles
Show child attributes
Keycloak client roles from resource_access.{clientId}.roles
Show child attributes
Groups from the Keycloak groups claim. Used for task visibility and UI group checks.
Show child attributes
Custom claims configured in Keycloak protocol mappers
Issue time of the token.
Expiry time of the token.
Token id (jti claim).
Object type.
Missing, invalid or expired access token.
Response Attributes
true for 2xx responses, false for errors.
HTTP status code, same as the response status.
HTTP reason phrase.
Message code for application errors with a defined code (EccException), e.g. EAP0001.
Message text. Localized for coded application errors, otherwise the technical exception message.
Simple class name of the error or its data (errors only).
Payload. Type depends on the endpoint. For coded application errors the EccException.
Not Allowed
Response