调用Keycloak Admin API修改用户配置遇405方法不允许错误排查

尝试通过Keycloak Admin REST API为Realm用户配置添加新的phone属性，按照官方文档要求使用PUT /admin/realms/{realm}/users/profile端点发送请求，但收到HTTP 405 Method Not Allowed错误。

请求代码：

### Add phone to user profile
PUT {{baseUrl}}/admin/reamls/{{realm}}/users/profile
Authorization: Bearer {{access_token}}
Content-Type: application/json

{
    "UPConfig": {
        "attributes": [
         {
            "name": "username",
            "displayName": "${username}",
            "validations": {
                "length": {
                    "min": 3,
                    "max": 255
                },
                "username-prohibited-characters": {},
                "up-username-not-idn-homograph": {}
            },
            "permissions": {
                "view": ["admin", "user"],
                "edit": ["admin", "user"]
            },
            "multivalued": false
        },
        {
            "name": "email",
            "displayName": "${email}",
            "validations": {
                "email": {},
                "length": {
                    "max": 255
                }
            },
            "required": {
                "roles": ["user"]
            },
            "permissions": {
                "view": ["admin", "user"],
                "edit": ["admin", "user"]
            },
            "multivalued": false
        },
        {
            "name": "firstName",
            "displayName": "${firstName}",
            "validations": {
                "length": {
                    "max": 255
                },
                "person-name-prohibited-characters": {}
            },
            "required": {
                "roles": ["user"]
            },
            "permissions": {
                "view": ["admin", "user"],
                "edit": ["admin", "user"]
            },
            "multivalued": false
        },
        {
            "name": "lastName",
            "displayName": "${lastName}",
            "validations": {
                "length": {
                    "max": 255
                },
                "person-name-prohibited-characters": {}
            },
            "required": {
                "roles": ["user"]
            },
            "permissions": {
                "view": ["admin", "user"],
                "edit": ["admin", "user"]
            },
            "multivalued": false
        },
        {
            "name": "phone",
            "displayName": "User phone",
            "required": {
                "roles": ["user"]
            },
            "permissions": {
                "view": ["admin", "user"],
                "edit": ["admin", "user"]
            },
            "multivalued": false
        }],
        "groups": [
        {
            "name": "user-metadata",
            "displayHeader": "User metadata",
            "displayDescription": "Attributes, which refer to user metadata"
        }]
    }
}

错误返回：

{
  "error": "HTTP 405 Method Not Allowed",
  "error_description": "For more on this error consult the server log at the debug level."
}

• 路径拼写错误：你已经注意到请求路径里的reamls是拼写错误，正确应为realms。这个错误会导致Keycloak无法识别目标端点，直接返回405 Method Not Allowed，这是最直接的原因。
• 请求体结构错误：请求体外层的UPConfig包裹是多余的，Keycloak要求的请求体是直接包含attributes和groups的对象，不需要嵌套在UPConfig中。正确的请求体结构应该是：

{
    "attributes": [
        // 所有属性配置...
    ],
    "groups": [
        // 分组配置...
    ]
}

• 权限验证：确保你的访问令牌拥有realm-admin角色权限，虽然405通常和路径/方法相关，但权限不足也可能引发异常，可通过Keycloak控制台确认令牌的角色范围。

内容的提问来源于stack exchange，提问作者Johan Pino