KeyCloak - Cannot Sign In to KeyCloak as Admin - "Please provide a valid address"

[Foxtrek64]

Hello,

After following the guide to install KeyCloak (found here), I attempted to sign into the admin console with the default credentials of admin, admin.

This took me to a page where it requested that I provide information like my email, first, and last name. Doing so, it said it sent me an email to authenticate, but I never received it.

Checking the console logs in the dashboard, I noticed the following exception:

2024-09-25T17:35:29.1966553 2024-09-25 22:35:29,196 WARN  [org.keycloak.events] (executor-thread-5) type="SEND_VERIFY_EMAIL_ERROR", realmId="b10029f6-8395-4647-9fc4-9d3e58b556cf", realmName="master", clientId="security-admin-console", userId="8f175387-7141-48da-904d-1ad28fc668f2", ipAddress="172.17.0.1", error="email_send_failed", custom_required_action="VERIFY_PROFILE", updated_first_name="...", response_type="code", updated_last_name="...", code_id="9a71361e-46bd-40b2-aa89-b646ea720fbd", response_mode="query", auth_method="openid-connect", updated_email="...", updated_username="...", previous_username="admin", context="UPDATE_PROFILE", redirect_uri="http://localhost:8080/admin/master/console/";, remember_me="false", email="...", username="admin"

(My real first, last, and email have been scrubbed and replaced with (...))

This is followed with the following stack trace:

2024-09-25T17:37:32.2960428 2024-09-25 22:37:32,295 ERROR [org.keycloak.services] (executor-thread-4) KC-SERVICES0029: Failed to send email: org.keycloak.email.EmailException: Please provide a valid address
2024-09-25T17:37:32.2960960 	at org.keycloak.email.DefaultEmailSenderProvider.toInternetAddress(DefaultEmailSenderProvider.java:175)
2024-09-25T17:37:32.2961044 	at org.keycloak.email.DefaultEmailSenderProvider.send(DefaultEmailSenderProvider.java:132)
2024-09-25T17:37:32.2961095 	at org.keycloak.email.DefaultEmailSenderProvider.send(DefaultEmailSenderProvider.java:66)
2024-09-25T17:37:32.2961165 	at org.keycloak.email.freemarker.FreeMarkerEmailTemplateProvider.send(FreeMarkerEmailTemplateProvider.java:282)
2024-09-25T17:37:32.2961233 	at org.keycloak.email.freemarker.FreeMarkerEmailTemplateProvider.send(FreeMarkerEmailTemplateProvider.java:272)
2024-09-25T17:37:32.2961466 	at org.keycloak.email.freemarker.FreeMarkerEmailTemplateProvider.send(FreeMarkerEmailTemplateProvider.java:263)
2024-09-25T17:37:32.2961534 	at org.keycloak.email.freemarker.FreeMarkerEmailTemplateProvider.send(FreeMarkerEmailTemplateProvider.java:257)
2024-09-25T17:37:32.2961603 	at org.keycloak.email.freemarker.FreeMarkerEmailTemplateProvider.send(FreeMarkerEmailTemplateProvider.java:211)
2024-09-25T17:37:32.2961672 	at org.keycloak.email.freemarker.FreeMarkerEmailTemplateProvider.sendVerifyEmail(FreeMarkerEmailTemplateProvider.java:163)
2024-09-25T17:37:32.2961741 	at org.keycloak.authentication.requiredactions.VerifyEmail.sendVerifyEmail(VerifyEmail.java:151)
2024-09-25T17:37:32.2961811 	at org.keycloak.authentication.requiredactions.VerifyEmail.requiredActionChallenge(VerifyEmail.java:80)
2024-09-25T17:37:32.2961881 	at org.keycloak.authentication.requiredactions.VerifyEmail.processAction(VerifyEmail.java:96)
2024-09-25T17:37:32.2961950 	at org.keycloak.services.resources.LoginActionsService.processRequireAction(LoginActionsService.java:1156)
2024-09-25T17:37:32.2962020 	at org.keycloak.services.resources.LoginActionsService.requiredActionGET(LoginActionsService.java:1101)
2024-09-25T17:37:32.2962090 	at org.keycloak.services.resources.LoginActionsService$quarkusrestinvoker$requiredActionGET_9a121cbb49e7ed57a09be9778477345240711ff5.invoke(Unknown Source)
2024-09-25T17:37:32.2962159 	at org.jboss.resteasy.reactive.server.handlers.InvocationHandler.handle(InvocationHandler.java:29)
2024-09-25T17:37:32.2962239 	at io.quarkus.resteasy.reactive.server.runtime.QuarkusResteasyReactiveRequestContext.invokeHandler(QuarkusResteasyReactiveRequestContext.java:141)
2024-09-25T17:37:32.2962299 	at org.jboss.resteasy.reactive.common.core.AbstractResteasyReactiveContext.run(AbstractResteasyReactiveContext.java:147)
2024-09-25T17:37:32.2962367 	at io.quarkus.vertx.core.runtime.VertxCoreRecorder$14.runWith(VertxCoreRecorder.java:582)
2024-09-25T17:37:32.2962437 	at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2513)
2024-09-25T17:37:32.2962506 	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1538)
2024-09-25T17:37:32.2962576 	at org.jboss.threads.DelegatingRunnable.run(DelegatingRunnable.java:29)
2024-09-25T17:37:32.2962646 	at org.jboss.threads.ThreadLocalResettingRunnable.run(ThreadLocalResettingRunnable.java:29)
2024-09-25T17:37:32.2962716 	at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
2024-09-25T17:37:32.2962785 	at java.base/java.lang.Thread.run(Thread.java:1583)

Is there a way to either

1. Get to the KeyCloak database to manually set my email as verified or, more ideally,
2. Set KeyCloak to not require email verification in the master realm, at least until I can get in and configure SMTP?

[christiannagel]

The password is not "admin". Check the user-secrets that are configured with the apphost. You'll see this parameter key:
"Parameters:keycloak-password", this contains the password you need to login.

With the AddKeycloak method, you can also supply the password to use as a parameter. If you don't specify this, the user secret is created.

[Foxtrek64]

That got it, thanks!

I will see about updating the documentation to point to user secrets.