Keycloak Gatekeeper CORS support for wildcard-subdomains

Securing applications
1

We wanna allow access per wildcards sub-Domains, like .my-domain.com
Would this be possible with the Gatekeeper Configuration without allowing everything ( - Conf)

Thx for any help
Sebastian

2

No. Only hardcoded single domain can be allowed by Gatekeeper. But you can whitelist all OPTIONS requests and then upstream app itself will process and return proper response.

1 Like
3

I think it would be possible. If go-chi would integrate this:

And Gatekeeper would upgrade library