Our OIDC adapters only support Keycloak and hence do not need to invoke the well known endpoint to know the endpoints. The URLs are simply derived from the auth-server-url and realm name. On 23 December 2016 at 14:22, Michael Furman <michael_furman(a)hotmail.com&gt; wrote:

Hi Stian, Thank you for your reply! You answer just answer my second question. I will not repeat questions. Any case, now org.keycloak.protocol.oidc.OIDCWellKnownProvider#getConfig does not support deployments behind NAT. I have changed the class to support such deployments. Do you interesting in such contribution? Best regards, Michael ________________________________ From: Stian Thorgersen <sthorger(a)redhat.com&gt; Sent: Monday, January 2, 2017 9:43 AM To: Michael Furman Cc: bill(a)burkecentral.com; keycloak-dev(a)lists.jboss.org Subject: Re: [keycloak-dev] The provider configuration Already answered on duplicated email. Please don't repeat your questions. On 26 December 2016 at 06:42, Michael Furman <michael_furman@hotmail.com<mailto:michael_furman@hotmail.com>> wrote: Dear Bill, I will happy for your reply. I have found that the provider configuration of Java adapters (Spring Security Adapter) implemented in org.keycloak.adapters.KeycloakDeployment#resolveUrls Just interesting why Keycloak Java adapter do not request the provider configuration via /.well-known/openid-configuration (https://openid.net/specs/openid-connect-discovery-1_0-17.html#ProviderCon... One more question: We need to support Keycloak behind the Network Address Tranlation (NAT) and therefore we need to modify org.keycloak.adapters.KeycloakDeployment#resolveUrls and org.keycloak.protocol.oidc.OIDCWellKnownProvider#getConfig. What is the best way to contribute it to Keycloak? Thanks in advance for your help, Michael ________________________________ From: keycloak-dev-bounces@lists.jboss.org<mailto:keycloak-dev-bounces@lists.jboss.org> <keycloak-dev-bounces@lists.jboss.org<mailto:keycloak-dev-bounces@lists.jboss.org>> on behalf of Michael Furman <michael_furman@hotmail.com<mailto:michael_furman@hotmail.com>> Sent: Friday, December 23, 2016 3:22 PM To: keycloak-dev@lists.jboss.org<mailto:keycloak-dev@lists.jboss.org> Subject: [keycloak-dev] What code in Keycloak IDP is responsible to return the configuration to Java adapters? Dear Keycloak people, I need our help. What code in Keycloak IDP is responsible to return the configuration to Java adapters (Spring Security Adapter) ? I mean all URLs in the org.keycloak.adapters.KeycloakDeployment class (authServerBaseUrl, tokenUrl etc.). I have modified org.keycloak.protocol.oidc.OIDCWellKnownProvider but this code is not executed during OIDC protocol with java adapters. Thanks in advance for your help, Michael _______________________________________________ keycloak-dev mailing list keycloak-dev@lists.jboss.org<mailto:keycloak-dev@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-dev keycloak-dev<https://lists.jboss.org/mailman/listinfo/keycloak-dev keycloak-dev> Info Page - lists.jboss.org<http://lists.jboss.org><https://lists.jboss.org/... lists.jboss.org<http://lists.jboss.org> To see the collection of prior postings to the list, visit the keycloak-dev Archives. Using keycloak-dev: To post a message to all the list members ... _______________________________________________ keycloak-dev mailing list keycloak-dev@lists.jboss.org<mailto:keycloak-dev@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-dev