External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-09 23:12:06 -03:30
Code Issues Packages Projects Releases Wiki Activity

fix: generalizing the misconfiguration detection. (#43500)

Browse Source 
closes: #43166

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
This commit is contained in:
Steven Hawkins 2025-10-21 05:44:00 -04:00 committed by GitHub
parent eed9d70ec0
commit 49305d1567
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
quarkus/runtime/src/main/java/org/keycloak/quarkus/runtime/configuration/mappers/HostnameV2PropertyMappers.java
View File

@ -104,11 +104,9 @@ public final class HostnameV2PropertyMappers implements PropertyMapperGrouping {
// else might be allowable if HOST is overwritten
}
if (proxyHeaders == null && !url.getPath().isEmpty()
&& Boolean.valueOf(Configuration.getConfigValue(HostnameV2Options.HOSTNAME_BACKCHANNEL_DYNAMIC).getValue())
&& !normalizePath(url.getPath()).equals(
if (proxyHeaders == null && !url.getPath().isEmpty() && !normalizePath(url.getPath()).equals(
normalizePath(Configuration.getConfigValue(HttpOptions.HTTP_RELATIVE_PATH).getValue()))) {
warn.accept("Likely misconfiguration detected. When using a `hostname` that includes a path that does not match the `http-relative-path` you must use `proxy-headers` to properly detect backchannel requests.");
warn.accept("Likely misconfiguration detected. When using a `hostname` that includes a path that does not match the `http-relative-path` you must use `proxy-headers`");
}
return true;