Skip to content
This repository was archived by the owner on Dec 7, 2020. It is now read-only.
This repository was archived by the owner on Dec 7, 2020. It is now read-only.

Louketo Proxy adds trailing slash to base-uri #574

@abstractj

Description

@abstractj

What:

Hi,
seems that Keycloak Gatekeeper 6.0.1 adds trailing slash to base-uri.
That will results to bad redirect url and redirect loop.
Example:

docker run -d \
-p 3000:3000 \
--restart unless-stopped \
--name guacamole-gatekeeper \
keycloak/keycloak-gatekeeper:6.0.1 \
    --discovery-url=https://keycloak.domain.com/auth/realms/foobar \
    --client-id=account \
    --client-secret=<redacted> \
    --listen=0.0.0.0:3000 \
    --encryption-key=<redacted> \
    --enable-default-deny=true \
    --redirection-url=https://guacamole.domain.com/ \
    --upstream-url=http://guacamole:8080/ \
    --base-uri=/guacamole \
    --oauth-uri=/oauth \
    --resources="uri=/guacmole/*|roles=admin" \
    --verbose=true \
    --preserve-host 

Will generate URL:

 https://keycloak.domain.com/auth/realms/foobar/protocol/openid-connect/auth?client_id=account&redirect_uri=https%3A%2F%2Fguacamole.domain.com%2Fguacamole%2F%2Foauth%2Fcallback&response_type=code&scope=openid+email+profile&state=1c4b2cd6-fc48-4046-868e-cef13ba0d696

Notice %2F%2 between base-uri and oauth-uri

Thanks

Reference:

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions