[keycloak-user] Using NGINX as reverse proxy, issuer in token is not using correct protocol

Hello, I am using NGINX as a reverse proxy in front of KeyCloak. The protocol between the client and NGINX is https, but between NGINX and KeyCloak, its http. In this case, I have set the X-Forwarded-For and X-Forwarded-Proto headers in NGINX. I see that the issuer in the well known configuration remains http, while it does contain the URL exposed via NGINX. As a result, the validation on issuer fails. How do I get to have the issuer as https instead of http? Regards, Ushanas.