KeycloakInstance

Signature

{
  authenticated?: boolean;
  subject?: string;
  realmAccess?: { roles: string[] };
  resourceAccess?: string[];
  token?: string;
  tokenParsed?: {
    exp?: number;
    email?: string,
    name?: string,
    iat?: number;
    nonce?: string;
    sub?: string;
    session_state?: string;
    realm_access?: { roles: string[] };
    resource_access?: string[];
  };
  refreshToken?: string;
  refreshTokenParsed?: { nonce?: string };
  idToken?: string;
  idTokenParsed?: { nonce?: string };
  timeSkew?: number;
}

Parameters

Parameter	Description
authenticated	Is true if the user is authenticated, false otherwise.
subject	The user id.
realmAccess	The realm roles associated with the token.
resourceAccess	The resource roles associated with the token.
token	The base64 encoded token that can be sent in the Authorization header in requests to services.
tokenParsed	The parsed JWT token as a JavaScript object.
refreshToken	The base64 encoded refresh token that can be used to retrieve a new token.
refreshTokenParsed	The parsed refresh token as a JavaScript object.
idToken	The base64 encoded ID token.
idTokenParsed	The parsed id token as a JavaScript object.
timeSkew	The estimated time difference between the browser time and the authentication server in seconds. This value is just an estimation but is accurate enough when determining if a token is expired or not.