Unable to set legacy-logout-redirect-uri on legacy-docker image #11601

joggeli34 · 2022-04-22T12:21:47Z

joggeli34
Apr 22, 2022

Hi,

I have upgraded keycloak to 18.0.0-legacy and now facing the error when logout that the redirect_uri is unknown. In the migration guide it is written that the legacy behaviour can be enabled with setting the property --spi-login-protocol-openid-connect-legacy-logout-redirect-uri=true

But how / where I can add this when running the legacy-docker image?

Answered by viljoviitanen

Apr 28, 2022

Add this in the xml configuration where the other spi configuration is:

            <spi name="login-protocol">
                <provider name="openid-connect" enabled="true">
                    <properties>
                        <property name="legacy-logout-redirect-uri" value="true"/>
                    </properties>
                </provider>
            </spi>

View full answer

viljoviitanen · 2022-04-28T11:09:10Z

viljoviitanen
Apr 28, 2022

Add this in the xml configuration where the other spi configuration is:

            <spi name="login-protocol">
                <provider name="openid-connect" enabled="true">
                    <properties>
                        <property name="legacy-logout-redirect-uri" value="true"/>
                    </properties>
                </provider>
            </spi>

1 reply

conet May 4, 2022

For anyone looking for a .cli file:

embed-server --server-config=standalone-ha.xml --std-out=echo
batch

/subsystem=keycloak-server/spi=login-protocol/:add
/subsystem=keycloak-server/spi=login-protocol/provider=openid-connect/:add(enabled=true)
/subsystem=keycloak-server/spi=login-protocol/provider=openid-connect/:map-put(name=properties,key=legacy-logout-redirect-uri,value=true)

run-batch
stop-embedded-server

Or the commands that can be run in the container:

/opt/jboss/keycloak/bin/jboss-cli.sh --connect --command='/subsystem=keycloak-server/spi=login-protocol/:add'
/opt/jboss/keycloak/bin/jboss-cli.sh --connect --command='/subsystem=keycloak-server/spi=login-protocol/provider=openid-connect/:add(enabled=true)'
/opt/jboss/keycloak/bin/jboss-cli.sh --connect --command='/subsystem=keycloak-server/spi=login-protocol/provider=openid-connect/:map-put(name=properties,key=legacy-logout-redirect-uri,value=true)'
/opt/jboss/keycloak/bin/jboss-cli.sh --connect --command='reload'

Navigation Menu

Repository navigation

Unable to set legacy-logout-redirect-uri on legacy-docker image #11601

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Unable to set legacy-logout-redirect-uri on legacy-docker image #11601

Uh oh!

joggeli34 Apr 22, 2022

Replies: 1 comment · 1 reply

Uh oh!

viljoviitanen Apr 28, 2022

Uh oh!

conet May 4, 2022

joggeli34
Apr 22, 2022

Replies: 1 comment 1 reply

viljoviitanen
Apr 28, 2022