[keycloak-user] Reverse proxy calling admin API

[Christian Bauer]

A workaround/solution is to set the Host header on the proxy. 

This is equivalent to setting ProxyPreserveHost On if you'd be using Apache mod_proxy. It requires some ugly hacks however customizing this header with my Resteasy/ApacheHttpClient proxy.

> On 22.05.2016, at 00:18, Christian Bauer <christian.bauer at gmail.com> wrote:
> 
> Already done. I don't think that affects HttpServletRequest#getRequestURL(), which is what Resteasy is using to populate UriInfo#getBaseUri()?
> 
>> set the proxy-address-forwarding="true" for the http-listener.
>> 
>>> 
>>> The proxy makes a call to Keycloak with a Bearer token and the correct X-Forwarded-* headers. Keycloak/Wildfly is configured with proxy-address-forwarding=true.
> 
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user