Redirect URI about k3s-traefik-forward-auth-openid-connect HOT 4 CLOSED

Just replace auth.mydomain.io with the hostname that is actually used in your ingress route by Traefik to direct that traffic to the traefik-forward-auth service.

from k3s-traefik-forward-auth-openid-connect.

Hi @wopl . What's the redirect url you have configured within Keycloak for your Traefik client?

In my Keycloak deployment the Traefik client (that used for the forward auth) has a redirect url of https://auth.mydomain.io/_oauth. This matches the auth.mydomain.io hostname that is configured for the Ingress Route, see https://github.com/sleighzy/k3s-traefik-forward-auth-openid-connect/blob/master/005-ingressroute.yaml#L13. The /_oauth path comes from the default "Callback URL Path" setting for the thomseddon/traefik-forward-auth container. You can see this in his README file (https://github.com/thomseddon/traefik-forward-auth/blob/master/README.md) for the --url-path argument or $URL_PATH environment variable.

I hadn't explicitly included in my configuration or README, but should do so to provide more information, I'll update my README for this.

from k3s-traefik-forward-auth-openid-connect.

In my Keycloak deployment the Traefik client (that used for the forward auth) has a redirect url of https://auth.mydomain.io/_oauth.

The auth.mydomain.io isn't literally my hostname just to be clear, I do actually have a proper domain name that points to my services. You would replace that with your own actual DNS name.

from k3s-traefik-forward-auth-openid-connect.

Hi @wopl , all sorted now? Ok if I close this issue?

from k3s-traefik-forward-auth-openid-connect.