<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Ran into your issue, found that securing the channel between nginx and keycloak did the trick.</div>
<div>—Doug</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><<a href="mailto:keycloak-user-bounces@lists.jboss.org">keycloak-user-bounces@lists.jboss.org</a>> on behalf of Adrian Matei <<a href="mailto:adrianmatei@gmail.com">adrianmatei@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Friday, January 29, 2016 at 4:12 AM<br>
<span style="font-weight:bold">To: </span>Marek Posolda <<a href="mailto:mposolda@redhat.com">mposolda@redhat.com</a>><br>
<span style="font-weight:bold">Cc: </span>keycloak-user <<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [keycloak-user] keycloak + nginx reverse proxy + too many redirects issue<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Hi Marek,
<div><br>
</div>
<div>everything works fine with both fb and google logins via nginx as reverse proxy, as long as I do everything over HTTP. Once I switch to HTTPS now I get either "Invalid parameter:redirect_uri" (the redirect_uri query parameter is generated with
<b>http, not https</b> in the navigation bar) before reaching the login form dialog or the redirect loops (fb login) or <span style="margin:0px;padding:0px;font-size:15px;line-height:22px">Error: redirect_uri_mismatch with google<b> </b>login </span>if I manage
to get passed that... In the realm client configuration I've added both <a href="https://podcastmania.ro/*">https://podcastmania.ro/*</a> and <a href="http://podcastmania.ro/*">http://podcastmania.ro/*</a> as valid redirect URIs. </div>
<div><br>
</div>
<div>Note: the builtin account application can be accessed correctly both with fb and google via https too...</div>
<div><br>
</div>
<div>I guess the next step would be to try to secure also the channel between nginx and keycloak, but that shouldn't be mandatory right?... </div>
<div><br>
</div>
<div>Thanks,</div>
<div>Adrian</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jan 28, 2016 at 3:35 PM, Marek Posolda <span dir="ltr">
<<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Does login through Google works if you don't use nginx proxy? Is there anything in the log?<span class=""><font color="#888888"><br>
<br>
Marek</font></span>
<div>
<div class="h5"><br>
<br>
On 28/01/16 13:23, Adrian Matei wrote:<br>
</div>
</div>
</div>
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">Thanks Marek, that fixed the NoClassDefFoundError, but now I am getting the same "This webpage has a redirect loop" message when trying to sign in with Google also...
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jan 28, 2016 at 12:28 PM, Marek Posolda <span dir="ltr">
<<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>I suppose you're using Keycloak 1.7? There is known issue related to this NoClassDefFoundError . You can workaround it by edit file $KEYCLOAK_HOME/modules/system/layers/base/org/keycloak/keycloak-login-freemarker/main/module.xml and add the line:<br>
<br>
<module name="org.keycloak.keycloak-broker-core"/><br>
<br>
into dependencies section. Same for module $KEYCLOAK_HOME/modules/system/layers/base/org/keycloak/keycloak-email-freemarker/main/module.xml<br>
<br>
Marek
<div>
<div><br>
<br>
<br>
On 28/01/16 06:47, Adrian Matei wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hi everyone,
<div><br>
</div>
<div>I am experimenting "too many redirects"/infinite loops issues in the browser when I try to connect with social providers. I am also getting internal server error on Chrome via google account (Caused by: java.lang.NoClassDefFoundError: org/keycloak/broker/provider/BrokeredIdentityContext).
It might be my configuration, but I did everything "by the book":</div>
<div><br>
</div>
<div># realm Require SSL:none</div>
<div><br>
</div>
<div>#nginx</div>
<div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div>http {</div>
<div> gzip on;</div>
<div> gzip_proxied any;</div>
<div> #gzip_proxied no-cache no-store private expired auth;</div>
<div> gzip_types text/plain text/html text/css application/json application/x-javascript application/xml application/xml+rss text/javascript application/javascript text/x-js;</div>
<div> #gzip_min_length 1000;</div>
<div><br>
</div>
<div><br>
</div>
<div> server_tokens off; #hides nginx version and OS running on</div>
<div> include /etc/nginx/mime.types;</div>
<div><br>
</div>
<div><br>
</div>
<div> upstream tomcat_server {</div>
<div> server localhost:8080;</div>
<div> }</div>
<div> upstream keycloak_server {</div>
<div> server localhost:8180;</div>
<div> }</div>
<div><br>
</div>
<div> server {</div>
<div> listen 80;</div>
<div> server_name <a href="http://podcastmania.ro/" target="_blank">podcastmania.ro</a>;</div>
<div> return 301 <a href="https://$host$request_uri" target="_blank">
</a><a href="https://$host$request_uri" target="_blank">https://$host$request_uri</a>;</div>
<div> }</div>
<div><br>
</div>
<div> server {</div>
<div><br>
</div>
<div> listen 443 ssl;</div>
<div><br>
</div>
<div> server_name <a href="http://podcastmania.ro/" target="_blank">podcastmania.ro</a> <a href="http://www.podcastmania.ro" target="_blank"></a><a href="http://www.podcastmania.ro" target="_blank">www.podcastmania.ro</a>;</div>
<div><br>
</div>
<div> ssl_certificate /etc/nginx/ssl/nginx.crt;</div>
<div> ssl_certificate_key /etc/nginx/ssl/nginx.key;</div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div> location / {</div>
<div> root /opt/tomcat/webapps/ROOT;</div>
<div> try_files $uri /maintenance.html @tomcat;</div>
<div> }</div>
<div><br>
</div>
<div> location @tomcat {</div>
<div> proxy_pass <a href="http://tomcat_server/" target="_blank"></a><a href="http://tomcat_server" target="_blank">http://tomcat_server</a>;</div>
<div><br>
</div>
<div> proxy_set_header Host $host; #to change the "Host" header set by default to $proxy_host to $host - the originating host request</div>
<div> proxy_set_header X-Real-IP $remote_addr;</div>
<div> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;</div>
<div> proxy_set_header X-Forwarded-Proto $scheme;</div>
<div> }</div>
<div><br>
</div>
<div><br>
</div>
<div> location /auth/ {</div>
<div> root /opt/keycloak/standalone/configuration/themes/keycloak/;</div>
<div> try_files $uri @keycloak;</div>
<div> }</div>
<div><br>
</div>
<div> location @keycloak {</div>
<div> proxy_pass <a href="http://keycloak_server/" target="_blank"></a><a href="http://keycloak_server" target="_blank">http://keycloak_server</a>;</div>
<div><br>
</div>
<div> proxy_set_header Host $host;</div>
<div> proxy_set_header X-Real-IP $remote_addr;</div>
<div> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;</div>
<div> proxy_set_header X-Forwarded-Proto $scheme;</div>
<div> proxy_set_header X-Forwarded-Port 443;</div>
<div> }</div>
<div><br>
</div>
<div><br>
</div>
<div> }</div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"># standalone.xml</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div> <subsystem xmlns="urn:jboss:domain:undertow:2.0"></div>
<div> <buffer-cache name="default"/></div>
<div> <server name="default-server"></div>
<div> <http-listener name="default" socket-binding="http" <b>redirect-socket="proxy-https" proxy-address-forwarding="true"</b>/></div>
<div> <host name="default-host" alias="localhost"></div>
<div> <location name="/" handler="welcome-content"/></div>
<div> <filter-ref name="server-header"/></div>
<div> <filter-ref name="x-powered-by-header"/></div>
<div> </host></div>
<div> </server></div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<div> <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:100}"></div>
<div> <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/></div>
<div> <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/></div>
<div> <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/></div>
<div> <socket-binding name="http" port="${jboss.http.port:8080}"/></div>
<div> <socket-binding name="https" port="${jboss.https.port:8443}"/></div>
<div> <socket-binding name="txn-recovery-environment" port="4712"/></div>
<div> <socket-binding name="txn-status-manager" port="4713"/></div>
<div><b> <socket-binding name="proxy-https" port="443"/></b></div>
<div> <outbound-socket-binding name="mail-smtp"></div>
<div> <remote-destination host="localhost" port="25"/></div>
<div> </outbound-socket-binding></div>
<div> </socket-binding-group></div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"># <a>app:spring</a> security configuration</div>
<div style="color:rgb(80,0,80);font-size:12.8px">
<pre style="color:rgb(0,0,0);font-family:Menlo;font-size:9pt"><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">context</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:component-scan </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">base-package</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:authentication-manager </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">alias</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="authenticationManager"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:authentication-provider </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProvider" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:authentication-manager</span><span style="background-color:rgb(239,239,239)">></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="adapterDeploymentContext" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.AdapterDeploymentContextBean"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="classpath:keycloak.json" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationEntryPoint" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationEntryPoint" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProvider" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationProvider" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakPreAuthActionsFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.filter.KeycloakPreAuthActionsFilter" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProcessingFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.filter.KeycloakAuthenticationProcessingFilter"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="authenticationManager" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="authenticationManager" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakLogoutHandler" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.keycloak.adapters.springsecurity.authentication.KeycloakLogoutHandler"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="adapterDeploymentContext" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">id</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.springframework.security.web.authentication.logout.LogoutFilter"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutSuccessUrl" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="handlers"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">list</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">ref </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakLogoutHandler" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">list</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">property </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutRequestMatcher"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">class</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="org.springframework.security.web.util.matcher.AntPathRequestMatcher"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="pattern" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/sso/logout**" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">constructor-arg </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">name</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="httpMethod" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">value</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="GET" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">property</span><span style="background-color:rgb(239,239,239)">></span><span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">bean</span><span style="background-color:rgb(239,239,239)">></span><span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:http </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">auto-config</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="false" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">use-expressions</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="true" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">entry-point-ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationEntryPoint"</span><span style="background-color:rgb(239,239,239)">></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:custom-filter </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakPreAuthActionsFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">before</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="LOGOUT_FILTER" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:custom-filter </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="keycloakAuthenticationProcessingFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">before</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="FORM_LOGIN_FILTER" </span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/registration" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/registration/confirm-email" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/registration/confirmed" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/password-forgotten" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/password-forgotten/confirm-email" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/password-forgotten/confirmed" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/users/**/*" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="hasRole('ROLE_USER')"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:intercept-url </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">pattern</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="/**" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">access</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="permitAll"</span><span style="background-color:rgb(239,239,239)">/></span>
<span style="background-color:rgb(239,239,239)"><</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:custom-filter </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">ref</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="logoutFilter" </span><span style="color:rgb(0,0,255);font-weight:bold;background-color:rgb(239,239,239)">position</span><span style="color:rgb(0,128,0);font-weight:bold;background-color:rgb(239,239,239)">="LOGOUT_FILTER" </span><span style="background-color:rgb(239,239,239)">/></span><span style="background-color:rgb(239,239,239)"></</span><span style="color:rgb(102,14,122);font-weight:bold;background-color:rgb(239,239,239)">security</span><span style="color:rgb(0,0,128);font-weight:bold;background-color:rgb(239,239,239)">:http</span><span style="background-color:rgb(239,239,239)">></span></pre>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">Has anyone faced similar issues?</div>
<div style="color:rgb(80,0,80);font-size:12.8px"><br>
</div>
<div style="color:rgb(80,0,80);font-size:12.8px">Thanks,</div>
<div style="color:rgb(80,0,80);font-size:12.8px">Adrian</div>
</div>
<br>
<fieldset></fieldset> <br>
</div>
</div>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</span>
</body>
</html>