I am having a strange behaviour that I am not sure how to solve.
As you can see in the picture I am trying to use a service that requires a logged user, so Keycloak redirect me to the login form. After that the user logged correctly and I get a " Your login attempt timed out. Login will start from the beginning. " and in the log we get the following message
type=LOGIN_ERROR, realmId=XXXX, clientId=null, userId=null, ipAddress=..., error=expired_code, restart_after_timeout=true, authSessionParentId=eb98f5b9-9132-4348-bee7-c5d8b6a39878, authSessionTabId=xlxPjp_ZCM8
This is only happening when I try to access the service through the reverse proxy but using the IP or the or an alias of the machine, and the reverse proxy has registered to be accessible through the hostname.
I mean if the reverse proxy uses the “myhostname” I need to use that hostname else if I use “myhostname.company.com” or the IP of the machine, I get that expire_code log message.
That doesnt happen to the admin since the keycloak.frontendUrl is set to the hostname and then when accessing the admin the redirect_url changes the value automatically from “myhostname.company.com/auth/admin…” to “myhostname/auth/admin…”, so after login in there is a redirect to the admin.
Do I have to force always to replace the redirect_url in the reverse proxy, like the keycloak is doing?
Kind regards and hope someone can help me