This requires changes to a lot of code. I started doing it once until I
realized how many files I would have to change.
On 3/25/2015 10:07 AM, Stian Thorgersen wrote:
According to the spec 'iss' should be:
REQUIRED. Issuer Identifier for the Issuer of the response. The iss value is a case
sensitive URL using the https scheme that contains scheme, host, and optionally, port
number and path components and no query or fragment components
However, we only use realm name. As that's invalid according to the spec (and also
the same iss used for multiple KC servers) I propose we change it to:
<AUTH URL>/realms/<REALM-NAME>
For example:
http://localhost:8080/realms/master
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com