Limit keycloak redirect urls

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
eclipse-che · Oct 12, 2020 · 7696a7c · 7696a7c
1 parent df0db47
commit 7696a7c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/keycloak_provision b/templates/keycloak_provision
@@ -20,7 +20,7 @@ if [ $? -eq 0 ]; then echo "Realm exists"; exit 0; fi \
                                         -s clientId=$keycloakClientId \
                                         -s id=$keycloakClientId \
                                         -s 'webOrigins=["http://$cheHost", "https://$cheHost"]' \
-                                        -s 'redirectUris=["http://$cheHost/*", "https://$cheHost/*"]' \
+                                        -s 'redirectUris=["http://$cheHost/dashboard/", "https://$cheHost/dashboard/", "http://$cheHost/workspace-loader/", "https://$cheHost/workspace-loader/", "http://$cheHost/_app/loader.html", "https://$cheHost/_app/loader.html"]' \
                                         -s 'directAccessGrantsEnabled'=true \
                                         -s publicClient=true \
 && $script create users   -s username=admin \