<div dir="ltr">The * can only be on the end of the valid redirect uri. So you need to specify '<a href="https://my-client.pibenchmark.com/*">https://my-client.pibenchmark.com/*</a>' or simply '*'. The latter not being a good idea obviously.</div><div class="gmail_extra"><br><div class="gmail_quote">On 18 September 2015 at 12:42, Kevin Thorpe <span dir="ltr"><<a href="mailto:kevin.thorpe@p-i.net" target="_blank">kevin.thorpe@p-i.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi, I'm trying to wrap Keycloak behind Nginx for a client and I can't work out how to</div><div>avoid the invalid parameter: redirect_uri problem.</div><div><br></div><div>Website is <a href="https://my-client.pibenchmark.com" target="_blank">https://my-client.pibenchmark.com</a></div><div><br></div><div>In nginx:</div><div>location /auth {</div><div> proxy_pass <a href="https://auth-service" target="_blank">https://auth-service</a>;</div><div>}</div><div><br></div><div>upstream auth-service {</div><div> server my-keycloak:8443;</div><div>}</div><div><br></div><div>Then in Keycloak I have valid redirect URIs set to https://*.<a href="http://pibenchmark.com/*" target="_blank">pibenchmark.com/*</a> ie my whole domain. Still getting invalid parameter: redirect_uri though. </div><div><br></div><div>What am I doing wrong? Can I do this this way? I like to have one point of contact with the internet for security reasons.</div><span class="HOEnZb"><font color="#888888"><br clear="all"><div><div><div dir="ltr"><div dir="ltr"><div><font color="#000000"><b>Kevin Thorpe<br></b></font></div>
<div>CTO, PI Limited</div></div></div></div></div>
</font></span></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>