If we enter base url (http://example.com) then the app works fine, login is successful and token is retrieved.

Unfortunately when entering this child page (https://example.com/?redirect_fragment=/asset-library/card-view/ - it is sent from javascript with redirect_fragment encoded, but in keycloak logs it’s visible with this fragment decoded) we get error 400 while getting token after succesful login and obtaining the code. The precise response is:

{"error_description":"Incorrect redirect_uri","error":"invalid_grant”}

Why is that? In valid redirects uri in keycloak we have (just in case):

- https://example.com*

- https://example.com/*

- https://example.com/?redirect_fragment=%2Fasset-library%2Fcard-view%2F

- http://example.com*

- http://example.com/*

- http://example.com/?redirect_fragment=%2Fasset-library%2Fcard-view%2F

Here are the logs of succesful log in with redirect URI beeing http://example.com :

And here are the logs of failed login with redirect URI being https://example.com/?redirect_fragment=/asset-library/card-view/: