Keycloak Quarkus - Invalid parameter: redirect_uri #14200

EbonyAdder · 2022-09-05T16:16:00Z

EbonyAdder
Sep 5, 2022

I am attempting to migrate from Keycloak v 16 to a Quarkus distribution. As part of this, I am placing a reverse proxy (nginx) in front to secure the admin console.

Relevant ngixn configuration:

server {
        server_name my-domain.com;
         
        proxy_set_header X-Forwarded-For $proxy_protocol_addr;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host $host;
         
        location / {
            root /var/www/html;
            try_files $uri $uri/ index.html;
         }        


	location /js/ {
             proxy_pass https://127.0.0.1:8443/;
	}

	location /realms/ {
             proxy_pass https://127.0.0.1:8443/realms/;
	}
	location /resources/ {
             proxy_pass https://127.0.0.1:8443/resources/;
	}
        

 

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/xxxx/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/xx/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

Relevant keycloak.conf properties:

# HTTP

# The file path to a server certificate or certificate chain in PEM format.
https-certificate-file=${kc.home.dir}/conf/fullchain.pem

# The file path to a private key in PEM format.
https-certificate-key-file=${kc.home.dir}/conf/privkey.pem

# The proxy address forwarding mode if the server is behind a reverse proxy.
proxy=reencrypt

# Do not attach route to cookies and rely on the session affinity capabilities from reverse proxy
#spi-sticky-session-encoder-infinispan-should-attach-route=false

# Hostname for the Keycloak server.
hostname=my-domain.com

I am not publicly exposing the admin console; however, I am using my firewall to limit access to the :8443 by IP. Now I can load the "Welcome to Keycloak" page just fine by navigating to https://my-domain.com:8443. However, when I click "admin console", I receive an error: "Invalid parameter: redirect_uri" I looked at the "redirect_urls" table directly in the DB, and all looks fine.

Any help or pointers would be greatly appreciated as I am bit at a lose as how to resolve or further troubleshoot.

Navigation Menu

Repository navigation

Keycloak Quarkus - Invalid parameter: redirect_uri #14200

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Keycloak Quarkus - Invalid parameter: redirect_uri #14200

Uh oh!

EbonyAdder Sep 5, 2022

Replies: 0 comments

EbonyAdder
Sep 5, 2022