For initial user authentication, Kustvakt supports OAuth2 authentication token request mechanism by using passwort grant (see OAuth2 token) web-service. To perform such requests, Kustvakt requires an initial super client which can be automatically registered at server start.

1. Create a json file with name initial_super_client.json at the project folder containing the client properties similar to the request body in the OAuth2 client registration web-service. For instance:

{
  "name":"initial super client",
  "type": "CONFIDENTIAL",
  "description":"initial super client for user authentication"
}

2. Add the following property in the kustvakt.conf file.

oauth2.initial.super.client=true

The file should be placed at the project folder. An example can be found at: /Kustvakt-full/src/main/resources/kustvakt.conf

3. Start the Kustvakt jar

java -jar target/Kustvakt-full-*.jar

A file containing a super client id and a super client secret should be generated at client/super_client_info. For instance:

{
    "client_id": "TmhrfP9GF3h6TNp99HLH6h",
    "client_secret": "ER_Nvy8BvWsPGXpSdxmJ7Q"
}