Compute authservice redirectUri #560
Labels
enhancement
New feature or request
operator
Issues pertaining to the UDS Operator (Pepr)
sso
Issues related to the SSO stack (Keycloak/Authservice)
Currently the authservice implementation uses the first
redirectUri
specified in the Packagesso
block as thecallback_uri
in the authservice configuration for the mission app.Ideally we would compute an arbitrary
callback_uri
and include that URI as an acceptable redirectUri in the Keycloak client. This would avoid scenarios where users can specify a URI that is incompatible with authservice (Keycloak allows globs in the redirectUri).Steps to implement this fix:
callback_uri
in the authservicebuildChain
function with a computed value that is:https://hostname/login
https://hostname/login
) in theclient.redirectUris
The text was updated successfully, but these errors were encountered: