Post login redirection with Minikube

[totterman]

Thank you for the excellent work!

I run a Spring Boot application based on the BFF tutorial, with good success, under Docker Compose.
Now I am trying to run the same with Minikube, but I have issues with the network configuration.
With Docker Compose it is too easy to go with host.docker.internal and a port number :-)

I have managed to get most of the components running, but I struggle with post login redirection.
myapp.mydomain is a domain name that I have set up in /etc/hosts to point to the Minikube IP address, and I have set up Gateway API to route traffic to the app.

This is in the Keycloak configmap: (running Keycloak in dev mode, importing realm from configmap)

"redirectUris" : [ "http://myapp.mydomain:80/ui", "http://ui.default.svc.cluster.local:80/ui", "https://myapp.mydomain:80/ui"],

But I find this error in the BFF server log:

com.c4_soft.springaddons.security.oidc.starter.properties.InvalidRedirectionUriException: http://myapp.mydomain:80/ui doesn't match accepted post login/logout redirection URI patterns

Apparently, I need to learn more about Kubernetes, Minikube, Keycloak, and OAuth2, and I would be grateful for pointers to some good resources. All help is appreciated!

[ch4mpy]

https://github.com/ch4mpy/spring-addons/tree/master/spring-addons-starter-oidc#1211-post-loginlogout-uris

post-login-redirect-host, post-login-redirect-path, post-logout-redirect-host, and post-logout-redirect-path are validated at startup. An exception is thrown in case of mismatch.

As explained in the same doc section, the default value for the allowed redirect host is based on the client-uri property. My guess is that you did not configure the client-uri with myapp.mydomain as hostname.

[totterman]

Thank you for a quick reply! Apparently, I was looking at completely wrong place, thinking it would be a Keycloak or Kubernetes configuration issue. Reading on!