-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Set keycloak-authorization proxy url #14778
Set keycloak-authorization proxy url #14778
Conversation
@@ -114,6 +114,10 @@ public void init(OidcConfig oidcConfig, KeycloakPolicyEnforcerConfig config, Tls | |||
adapterConfig.setAllowAnyHostname(true); | |||
} | |||
|
|||
if (oidcConfig.defaultTenant.proxy.host.isPresent()) { | |||
adapterConfig.setProxyUrl(oidcConfig.defaultTenant.proxy.host.get() + ":" + oidcConfig.defaultTenant.proxy.port); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No checks against proxy.port?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@gastaldi It is defaulted to 80
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@sberyozkin LGTM, except for @gastaldi comment.
Did you define a default port for quarkus-oidc
?
@pedroigor Yeah :-) OidcCommonConfig.proxy |
MP tests have failed, not related |
Thanks, since it was only MP related build which failed I'll merge, CI seems unstable right now otherwise... |
Fixes #14733
This PR sets it as for example
localhost:80
.Keycloak adapter code checks it like this:
where the scheme is defaulted to
http
which users can override by setting the host tohttps://localhost
etc