AWS + ECS + ALB + HTTPS but

Securing applications
1

Hello,
I have some trouble with Keycloak admin part using https.
I successfully configure connection to my application using HTTPS (ACM) and keycloak authentication as well. but when I try to log in on admin web site for keycloak, my form will try to POST using http instead of HTTPS. I don’t know why the protocol change.
Did you how to resolve this issue?
Thank you for your help.
DG

2

Take a look at https://www.keycloak.org/docs/latest/server_installation/index.html#_setting-up-a-load-balancer-or-proxy

3

With ECS, add a variable : PROXY_ADDRESS_FORWARDING with a value of “true”.
That should probably fix it.

4

For anyone who is looking for a fix, there are two environment variables required:

As mentioned in max-allan-surevine’s post
PROXY_ADDRESS_FORWARDING = true
and
KEYCLOAK_FRONTEND_URL = enter your front end URL path starting with https

5

AWS ALB with Keycloak OIDC

The first authenticate call is 302 but whereas the next oauth2/idpresponse?state is always 500 error

in AWS log authenticate" “-” "AuthTokenEpRequestFailed