<div dir="ltr">Hi Marek,<div><br></div><div>everything works fine with both fb and google logins via nginx as reverse proxy, as long as I do everything over HTTP. Once I switch to HTTPS now I get either "Invalid parameter:redirect_uri" (the redirect_uri query parameter is generated with <b>http, not https</b> in the navigation bar) before reaching the login form dialog or the redirect loops (fb login) or <span style="margin:0px;padding:0px;font-size:15px;line-height:22px">Error: redirect_uri_mismatch with google<b> </b>login </span>if I manage to get passed that... In the realm client configuration I've added both <a href="https://podcastmania.ro/*">https://podcastmania.ro/*</a> and <a href="http://podcastmania.ro/*">http://podcastmania.ro/*</a> as valid redirect URIs. </div><div><br></div><div>Note: the builtin account application can be accessed correctly both with fb and google via https too...</div><div><br></div><div>I guess the next step would be to try to secure also the channel between nginx and keycloak, but that shouldn't be mandatory right?... </div><div><br></div><div>Thanks,</div><div>Adrian</div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 28, 2016 at 3:35 PM, Marek Posolda <span dir="ltr"><<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Does login through Google works if you
don't use nginx proxy? Is there anything in the log?<span class=""><font color="#888888"><br>
<br>
Marek</font></span><div><div class="h5"><br>
<br>
On 28/01/16 13:23, Adrian Matei wrote:<br>
</div></div></div><div><div class="h5">
<blockquote type="cite">
<div dir="ltr">Thanks Marek, that fixed the NoClassDefFoundError,
but now I am getting the same "This webpage has a redirect
loop" message when trying to sign in with Google also...
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jan 28, 2016 at 12:28 PM,
Marek Posolda <span dir="ltr"><<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>I suppose you're using Keycloak 1.7? There is known
issue related to this NoClassDefFoundError . You can
workaround it by edit file
$KEYCLOAK_HOME/modules/system/layers/base/org/keycloak/keycloak-login-freemarker/main/module.xml
and add the line:<br>
<br>
<module
name="org.keycloak.keycloak-broker-core"/><br>
<br>
into dependencies section. Same for module
$KEYCLOAK_HOME/modules/system/layers/base/org/keycloak/keycloak-email-freemarker/main/module.xml<br>
<br>
Marek
<div>
<div><br>
<br>
<br>
On 28/01/16 06:47, Adrian Matei wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hi everyone,
<div><br>
</div>
<div>I am experimenting "too many
redirects"/infinite loops issues in the
browser when I try to connect with social
providers. I am also getting internal server
error on Chrome via google account (Caused by:
java.lang.NoClassDefFoundError:
org/keycloak/broker/provider/BrokeredIdentityContext).
It might be my configuration, but I did
everything "by the book":</div>
<div><br>
</div>
<div># realm Require SSL:none</div>
<div><br>
</div>
<div>#nginx</div>
<div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div>http {</div>
<div> gzip on;</div>
<div> gzip_proxied any;</div>
<div> #gzip_proxied no-cache no-store
private expired auth;</div>
<div> gzip_types text/plain text/html
text/css application/json
application/x-javascript application/xml
application/xml+rss text/javascript
application/javascript text/x-js;</div>
<div> #gzip_min_length 1000;</div>
<div><br>
</div>
<div><br>
</div>
<div> server_tokens off; #hides nginx
version and OS running on</div>
<div> include /etc/nginx/mime.types;</div>
<div><br>
</div>
<div><br>
</div>
<div> upstream tomcat_server {</div>
<div> server localhost:8080;</div>
<div> }</div>
<div> upstream keycloak_server {</div>
<div> server localhost:8180;</div>
<div> }</div>
<div><br>
</div>
<div> server {</div>
<div> listen 80;</div>
<div> server_name <a href="http://podcastmania.ro/" target="_blank">podcastmania.ro</a>;</div>
<div> return 301 <a href="https://$host$request_uri" target="_blank"></a><a href="https://$host$request_uri" target="_blank">https://$host$request_uri</a>;</div>
<div> }</div>
<div><br>
</div>
<div> server {</div>
<div><br>
</div>
<div> listen 443 ssl;</div>
<div><br>
</div>
<div> server_name <a href="http://podcastmania.ro/" target="_blank">podcastmania.ro</a> <a href="http://www.podcastmania.ro" target="_blank"></a><a href="http://www.podcastmania.ro" target="_blank">www.podcastmania.ro</a>;</div>
<div><br>
</div>
<div> ssl_certificate
/etc/nginx/ssl/nginx.crt;</div>
<div> ssl_certificate_key
/etc/nginx/ssl/nginx.key;</div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div> location / {</div>
<div> root
/opt/tomcat/webapps/ROOT;</div>
<div> try_files $uri
/maintenance.html @tomcat;</div>
<div> }</div>
<div><br>
</div>
<div> location @tomcat {</div>
<div> proxy_pass <a href="http://tomcat_server/" target="_blank"></a><a href="http://tomcat_server" target="_blank">http://tomcat_server</a>;</div>
<div><br>
</div>
<div> proxy_set_header Host
$host; #to change the "Host" header set by
default to $proxy_host to $host - the
originating host request</div>
<div> proxy_set_header
X-Real-IP $remote_addr;</div>
<div> proxy_set_header
X-Forwarded-For
$proxy_add_x_forwarded_for;</div>
<div> proxy_set_header
X-Forwarded-Proto $scheme;</div>
<div> }</div>
<div><br>
</div>
<div><br>
</div>
<div> location /auth/ {</div>
<div> root
/opt/keycloak/standalone/configuration/themes/keycloak/;</div>
<div> try_files $uri
@keycloak;</div>
<div> }</div>
<div><br>
</div>
<div> location @keycloak {</div>
<div> proxy_pass <a href="http://keycloak_server/" target="_blank"></a><a href="http://keycloak_server" target="_blank">http://keycloak_server</a>;</div>
<div><br>
</div>
<div> proxy_set_header Host
$host;</div>
<div> proxy_set_header
X-Real-IP $remote_addr;</div>
<div> proxy_set_header
X-Forwarded-For
$proxy_add_x_forwarded_for;</div>
<div> proxy_set_header
X-Forwarded-Proto $scheme;</div>
<div> proxy_set_header
X-Forwarded-Port 443;</div>
<div> }</div>
<div><br>
</div>
<div><br>
</div>
<div> }</div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">#
standalone.xml</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div> <subsystem
xmlns="urn:jboss:domain:undertow:2.0"></div>
<div> <buffer-cache
name="default"/></div>
<div> <server
name="default-server"></div>
<div> <http-listener
name="default" socket-binding="http" <b>redirect-socket="proxy-https"
proxy-address-forwarding="true"</b>/></div>
<div> <host
name="default-host" alias="localhost"></div>
<div> <location
name="/" handler="welcome-content"/></div>
<div> <filter-ref
name="server-header"/></div>
<div> <filter-ref
name="x-powered-by-header"/></div>
<div> </host></div>
<div> </server></div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div> <socket-binding-group
name="standard-sockets"
default-interface="public"
port-offset="${jboss.socket.binding.port-offset:100}"></div>
<div> <socket-binding
name="management-http"
interface="management"
port="${jboss.management.http.port:9990}"/></div>
<div> <socket-binding
name="management-https"
interface="management"
port="${jboss.management.https.port:9993}"/></div>
<div> <socket-binding name="ajp"
port="${jboss.ajp.port:8009}"/></div>
<div> <socket-binding name="http"
port="${jboss.http.port:8080}"/></div>
<div> <socket-binding name="https"
port="${jboss.https.port:8443}"/></div>
<div> <socket-binding
name="txn-recovery-environment"
port="4712"/></div>
<div> <socket-binding
name="txn-status-manager" port="4713"/></div>
<div><b> <socket-binding
name="proxy-https" port="443"/></b></div>
<div> <outbound-socket-binding
name="mail-smtp"></div>
<div> <remote-destination
host="localhost" port="25"/></div>
<div>
</outbound-socket-binding></div>
<div> </socket-binding-group></div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">#
<a>app:spring</a>
security configuration</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<pre style="color:rgb(0,0,0);font-family:Menlo;font-size:9pt"><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">context</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:component-scan </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">base-package</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:authentication-manager </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">alias</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="authenticationManager"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:authentication-provider </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProvider" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:authentication-manager</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="adapterDeploymentContext" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.AdapterDeploymentContextBean"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="classpath:keycloak.json" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationEntryPoint" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationEntryPoint" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProvider" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationProvider" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakPreAuthActionsFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.filter.KeycloakPreAuthActionsFilter" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProcessingFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.filter.KeycloakAuthenticationProcessingFilter"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="authenticationManager" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="authenticationManager" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakLogoutHandler" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.authentication.KeycloakLogoutHandler"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="adapterDeploymentContext" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.springframework.security.web.authentication.logout.LogoutFilter"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutSuccessUrl" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="handlers"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">list</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">ref </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakLogoutHandler" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">list</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">property </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutRequestMatcher"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.springframework.security.web.util.matcher.AntPathRequestMatcher"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="pattern" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/sso/logout**" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="httpMethod" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="GET" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">property</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:http </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">auto-config</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="false" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">use-expressions</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="true" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">entry-point-ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationEntryPoint"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:custom-filter </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakPreAuthActionsFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">before</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="LOGOUT_FILTER" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:custom-filter </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProcessingFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">before</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="FORM_LOGIN_FILTER" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/registration" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/registration/confirm-email" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/registration/confirmed" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/password-forgotten" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/password-forgotten/confirm-email" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/password-forgotten/confirmed" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/**/*" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="hasRole('ROLE_USER')"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/**" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:custom-filter </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">position</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="LOGOUT_FILTER" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:http</span><span style="background-color:rgb(239,239,239)">></span>
</pre>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">Has
anyone faced similar issues?</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">Thanks,</div>
<div style="color:rgb(80,0,80);font-size:12.8px">Adrian</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
<br>
</div></div></div>
</blockquote></div><br></div></div>