When does it forward the browser from https to http?
As Bill pointed out, does auth-server-url in your keycloak.json point to your proxy with https?
What adapter are you using?
----- Original Message -----
> From: "Josh" <smysnk@gmail.com>
> To: keycloak-user@lists.jboss.org
> Sent: Friday, 13 June, 2014 8:41:32 AM
> Subject: [keycloak-user] Significant SSL issue: Support for reverse proxies
>
> Hi guys,
>
> So looking to help solve this issue possibly or at least get it on the radar,
> I've reported it here: https://issues.jboss.org/browse/KEYCLOAK-497
>
> To breifly recap the issue, when logging in via reverse proxy it keeps
> forwarding the browser from https back to regular http.
>
> Eg. Apache virtualhost configured as:
>
> <VirtualHost *:443>
> ServerName auth.domain.com
> SSLEngine On
>
> <Proxy *>
> Order deny,allow
> Allow from all
> </Proxy>
>
> ProxyVia Off
> ProxyPreserveHost On
> ProxyRequests Off
>
> ProxyPass / http://keycloak.core.docker:8080/
> ProxyPassReverse / http://keycloak.core.docker:8080/
>
>
> </VirtualHost>
>
> If I were to start looking into the code base, where would I start? Trying to
> find for example during the login process how the forward url is formed?
>
> Thanks,
>
> Josh
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user@lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user