<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 23 November 2015 at 20:00, Håvard Wigtil <span dir="ltr"><<a href="mailto:haavard.wigtil@kantega.no" target="_blank">haavard.wigtil@kantega.no</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I'm trying to get a relative (i.e. path only with no host) redirect URI<br>
for a Keycloak client to work. My client works with full host and path,<br>
but if I remove the host part I get an illegal parameter error.<br></blockquote><div><br></div><div>What do you mean you get an illegal parameter error?</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
The inline help bubble has the following sentence: "Relative path can be<br>
specified too, i.e. /my/relative/path/*."<br>
So as far as I can tell, it should work according to the help message.<br>
As I was trying to find out more about this I came across Jira issue<br>
KEYCLOAK-8[1], where a comment pointed to section 3.2.1[2] of the OAuth<br>
2.0 spec. If I'm reading the spec correctly the redirect *must* be<br>
absolute to be conformant with the spec.<br></blockquote><div><br></div><div>Relative URLs are supported, but they are resolved to absolute URLs by adding the Root URL of the client. If you don't specify the root URL the root URL of Keycloak is used</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Is the inline help wrong, or is it something here that I don't get?<br>
<br>
Håvard<br>
<br>
<br>
[1] <a href="https://issues.jboss.org/browse/KEYCLOAK-8" rel="noreferrer" target="_blank">https://issues.jboss.org/browse/KEYCLOAK-8</a><br>
[2] <a href="https://tools.ietf.org/html/rfc6749#section-3.1.2" rel="noreferrer" target="_blank">https://tools.ietf.org/html/rfc6749#section-3.1.2</a><br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></blockquote></div><br></div></div>