[keycloak-user] Services behind a Proxy that offloads SSL

[Malte Finsterwalder]

Thanks for your help, but I can't find anything helpfull in the docs. I
scanned the complete documentation and read a lot of it.
Could you point me to a particular chapter?

To clarify: I don't have a problem with Keycloak being behind a proxy, that
offloads SSL.

I have a problem with the service being behind a proxy. The service itself
is access via HTTP, since SSL is offloaded on the Proxy.
The client adapter then creates a redirect URL as HTTP, not HTTPS and
passes that to Keycloak. So when Keycloak redirects back to the service, it
uses the HTTP URL provided by the client adapter, which is "wrong".

Thanks,
   Malte

On 27 November 2017 at 20:26, Stian Thorgersen <sthorger at redhat.com> wrote:

> Read the docs. There's a section on how to configure Keycloak properly
> when you're using a reverse proxy
>
> On 27 November 2017 at 17:31, Malte Finsterwalder <inofi at gmx.net> wrote:
>
>> Hi there,
>>
>> I have a service running in a JBoss server, that I want to secure via the
>> keycloak adapter.
>> The server is behind a proxy, that offloads SSL, so the server itself gets
>> traffic as http.
>> When the server redirects to keycloak for authentication, the redirect URL
>> supplied to keycloak is http, not https. How can I ensure, that a redirect
>> URL is an https URL?
>>
>> Greetings,
>>    Malte
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>