Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Issue] Invalid HTTPS requests to local Keycloak #573

Open
abhijith-hr opened this issue Jul 26, 2024 · 1 comment
Open

[Issue] Invalid HTTPS requests to local Keycloak #573

abhijith-hr opened this issue Jul 26, 2024 · 1 comment

Comments

@abhijith-hr
Copy link
Contributor

abhijith-hr commented Jul 26, 2024 •
edited
Loading

In local Keycloak deployment, the access_token generated with https requests are invalid even if the response is 200 OK.

For example, https://keycloak.local/auth/realms/iff/protocol/openid-connect/token produces invaid access_token.

  • HTTPS must be disabled in Keycloak for local deployment if no additional valid CA is present. In this case, Clients must get an error if using HTTPS for token generation request.

  • All clients in local deplyoment must only use HTTP with keycloak, unless a valid CA cert is added to the cluster.
@abhijith-hr
Copy link
Contributor Author

PR #574

@abhijith-hr abhijith-hr changed the title [Issue] Invalid token in local keycloak, generated with HTTPS requests [Issue] Invalid HTTPS requests to local Keycloak Jul 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@abhijith-hr