Re: [keycloak-dev] Redirect urls are not taking into account default ports

Hi all, during testing of openshift + keycloak with Vlasta, we encountered some port problems with our testsuite. The thing is that our testsuite almost always counts with some port in redirect uris. The problem is, when keycloak is running on port 80 because browser sometimes removes this port which results in a failure because keycloak expects url including port. One solution is to double redirect urls (with and without port) in realms in testsuite. This is something we already started to work on and have some working test classes already. However, before changing it everywhere we would like to confirm that Keycloak is behaving correctly and should refuse redirect uri if it differs only in in/excluding port 80 from url in specified in realm. Example: 1. Client contains valid redirect url: http://DOMAIN:80/CONTEXT 2. You open login page with redirect_uri=http://DOMAIN/CONTEXT 3. Should Keycloak refuse such login with error page: "Invalid parameter: redirect_uri" Michal _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev