<div dir="ltr">I'm talking more about the login, registration, administration on the key cloak server, all the links revert https back to http. I haven't got around to testing the adapters yet.</div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Fri, Jun 13, 2014 at 6:42 AM, Bill Burke <span dir="ltr"><<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Was the adapter not configured right? It should be pointed to the auth<br>
server's reverse-proxy URL.<br>
<div class="HOEnZb"><div class="h5"><br>
On 6/13/2014 3:50 AM, Juraci Paixão Kröhling wrote:<br>
> -----BEGIN PGP SIGNED MESSAGE-----<br>
> Hash: SHA512<br>
><br>
> I faced the exact same issue earlier this week, but with nginx. On a<br>
> quick look, the problem seems to be on the JavaScript adapter, which<br>
> seems to think that it's being served via non-SSL.<br>
><br>
> As I haven't had enough time to debug and do a proper fix, the quick<br>
> solution was to configure Wildfly to serve Keycloak via SSL and proxy<br>
> the request to 8443 instead of 8080. It works, but it's suboptimal.<br>
> There are instructions on the documentation on how to setup Wildfly to<br>
> serve requests via SSL.<br>
><br>
> - - Juca.<br>
><br>
> On 06/13/2014 09:41 AM, Josh wrote:<br>
>> Hi guys,<br>
>><br>
>> So looking to help solve this issue possibly or at least get it on<br>
>> the radar, I've reported it here:<br>
>> <a href="https://issues.jboss.org/browse/KEYCLOAK-497" target="_blank">https://issues.jboss.org/browse/KEYCLOAK-497</a><br>
>><br>
>> To breifly recap the issue, when logging in via reverse proxy it<br>
>> keeps forwarding the browser from https back to regular http.<br>
>><br>
>> Eg. Apache virtualhost configured as:<br>
>><br>
>> <VirtualHost *:443> ServerName <a href="http://auth.domain.com" target="_blank">auth.domain.com</a><br>
>> <<a href="http://auth.domain.com" target="_blank">http://auth.domain.com</a>> SSLEngine On<br>
>><br>
>> <Proxy *> Order deny,allow Allow from all </Proxy><br>
>><br>
>> ProxyVia Off ProxyPreserveHost On<br>
>> ProxyRequests Off<br>
>><br>
>> ProxyPass / <a href="http://keycloak.core.docker:8080/" target="_blank">http://keycloak.core.docker:8080/</a><br>
>> ProxyPassReverse / <a href="http://keycloak.core.docker:8080/" target="_blank">http://keycloak.core.docker:8080/</a><br>
>><br>
>><br>
>> </VirtualHost><br>
>><br>
>> If I were to start looking into the code base, where would I<br>
>> start? Trying to find for example during the login process how the<br>
>> forward url is formed?<br>
>><br>
>> Thanks,<br>
>><br>
>> Josh<br>
>><br>
>><br>
>> _______________________________________________ keycloak-user<br>
>> mailing list <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
>> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
>><br>
><br>
> -----BEGIN PGP SIGNATURE-----<br>
> Version: GnuPG v2.0.22 (GNU/Linux)<br>
> Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
><br>
> iQEcBAEBCgAGBQJTmq1jAAoJEDnJtskdmzLM+iIIAI/TPlujrVqrFM6u7XqarUB/<br>
> RVtgPzsF3cjeKJZQYAxJhBO7eMHYlGsfFwROylV1F397PNvQdOE5E+TBXI/pDwXr<br>
> t5PVVVw9ehUVkf2gGLLXWkrniUCxbetKvColKIbRMGSpJuIOnUkLkP6J1J2wHGhl<br>
> u5oLYNxLZfhP0Ag5/U9+3Mnezti0yKD7Z1818BtV45+9cCqwV45XqbcwNyoeBCPC<br>
> +8iOmg5aFlNki1D/zGZNOkgziLzq8+lmK2yrpZGvSRZ10ShbCj80v72nkBB101Ac<br>
> 6SYofgywL2CcDCOK1/MEo71pUzaUrXLoNbTT/4v18TSXvCF9M0RUSJSEr8MRvYk=<br>
> =jExe<br>
> -----END PGP SIGNATURE-----<br>
> _______________________________________________<br>
> keycloak-user mailing list<br>
> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
><br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
Bill Burke<br>
JBoss, a division of Red Hat<br>
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a><br>
</font></span><div class="HOEnZb"><div class="h5">_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</div></div></blockquote></div><br></div>