8:10 a.m.
The two special redirect-uris you refer to are for installed applications (for example a
CLI interface or a desktop app). In #1 you're asking about bundling with your web app,
so you shouldn't be using these.
Instead you should use whatever URL you use to access your application. For example if
your application is:
http://www.mydomain.com/myapp/secure.html
Then your redirect-uri should be:
http://www.mydomain.com/myapp/secure.html
You can also use a wild-card if you want to allow any page on a certain
domain/context-path, for example:
http://www.mydomain.com/myapp/*
----- Original Message -----
From: "Vivek Srivastav (vivsriva)"
<vivsriva(a)cisco.com>
To: keycloak-user(a)lists.jboss.org
Sent: Monday, 28 July, 2014 1:54:58 PM
Subject: [keycloak-user] Clarification on redirect uri configuration on the KeyCloak
admin console
I am trying to understand the redirect uri configuration on the KeyCloak
admin console.
As per the document:
http://docs.jboss.org/keycloak/docs/1.0-beta-3/userguide/html_single/#ins...
there are two special special redirect uri for application. I have few
questions about the http://localhost
1. When I configure my application with the http://localhost and
confidential access_type, am I supposed to provide a callback
implementation or is is handled by keyclock client libraries that I
bundle with my web app?
2. Am I supposed to provide a “port” along with the redirect uri? I.e.
http://localhost:8989 ? It seems like with either configuration gives me
“WE’RE SORRY”, “Invalid redirect_uri”.
3. When running KeyCloak and my client application on separate servers,
will the http://localhost redirect uri automatically supposed to be
replaced with the correct IP address/hostname of the Resource Server
provides, I.e. my application?
I understand that this redirect_uri has been made a mandatory field in recent
release of KeyCloak and I could not find information related to its
configuration in the “Base Part 1” tutorial video.
Any pointers about how to configure this redirect uri for “confidential”
access_type would be very helpful.
Kind Regards,
Vivek
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user