Re: [keycloak-user] Reverse proxy calling admin API
A workaround/solution is to set the Host header on the proxy.
This is equivalent to setting ProxyPreserveHost On if you'd be using Apache mod_proxy.
It requires some ugly hacks however customizing this header with my
Resteasy/ApacheHttpClient proxy.
On 22.05.2016, at 00:18, Christian Bauer
<christian.bauer(a)gmail.com> wrote:
Already done. I don't think that affects HttpServletRequest#getRequestURL(), which is
what Resteasy is using to populate UriInfo#getBaseUri()?
> set the proxy-address-forwarding="true" for the http-listener.
>
>>
>> The proxy makes a call to Keycloak with a Bearer token and the correct
X-Forwarded-* headers. Keycloak/Wildfly is configured with proxy-address-forwarding=true.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user