[keycloak-user] keycloak Nginx TLS problem

[Konsulent Thomas Isaksen (TNO)]

Can anyone please help, I have spent all day searching for the answer but I'm not getting anywhere.

I am trying to configure Nginx as a reverse-proxy to Keycloak and I'm getting close, access to keycloak console and such via https is working just fine.
The problem is when I try to login to my app and return from the auth provider (azure)  I get a 403 forbidden and the following message in the application log:

2019-03-07 14:50:45,831 ERROR [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-9) Adapter requires SSL. Request: http://local.toyota.no/workBenchWeb/zul/main.zul?state=c23babe7-6637-48fe-ab6d-1fd93d168e76&session_state=6dea7cb2-27a5-4e9a-9c90-000297d42528&code=304398e5-6fa7-435c-bd4c-a02899d4e412.6dea7cb2-27a5-4e9a-9c90-000297d42528.27a4bd04-e22e-4186-b8c8-cc0895ab429f

My keycloak.json:

{
  "realm": "TKS-TEST",
  "auth-server-url": "https://kct.toyota.no/auth",
  "ssl-required": "all",
  "resource": "tks-test-client",
  "public-client": true,
  "confidential-port": 443,
  "principal-attribute": "preferred_username"
}


./t