6:20 a.m.
Hi,
I currently have standalone Keycloak running behind an SSL enabled Nginx proxy, self
signed certs. for the moment.
Keycloak client is running on http://localhost:8080, ssl required = none, Nginx setup to
redirect any request to /auth to this instance of Keycloak.
This is a web app using the Keycloak Javascript Adapaer set to public.
Issue is the Keycloak login form action, it's url is using the http scheme rather than
https so as a result login fails.
If I do a live edit in the browser of the forms url and change the scheme to https
everything is fine and all the other url's (such as account information) work
correctly in the app.
Wondering if I am doing something wrong here or if it is a known issue,
Cheers,
Gary.
7:48 a.m.
On 24.03.2016 12:20, Gary Smith wrote:
Issue is the Keycloak login form action, it's url is using the
http
scheme rather than https so as a result login fails.
Is the login page being served under HTTPS? If so, then you might be
missing some nginx "proxy_set_header" directives in the configuration
file. Here's what I have on my nginx:
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
Besides that, you'll need to add "proxy-address-forwarding" and
"redirect-socket" to the HTTP listener, as well as add a socket-binding
for the proxy port 443. It's described here, under "3.2.7.2.1. Configure
WildFly":
http://keycloak.github.io/docs/userguide/keycloak-server/html_single/inde...
If your login page is under HTTP, instead of HTTPS, then you might need
to adjust the server-url on the keycloak.json.
- Juca.
3298
days inactive
3298
days old
1 comments
2 participants
participants (2)
-
Gary Smith -
Juraci Paixão Kröhling