Hello I created https://ops4j1.jira.com/browse/PAXWEB-1233 to track this. Should be fixed with pax-web 7.3.4.
regards Grzegorz Grzybek czw., 22 sie 2019 o 08:19 Hannes Holtzhausen <[email protected]> napisał(a): > Good day > > Pax-web-undertow 7.3.3 ignores the proxy-address-forwarding attribute and > org.osgi.service.http.checkForwardedHeaders > property. > > As a result non of the X-Forwarded headers are applied to the http > request in scenarios where SSL is offloaded using a load balancer. > This in turn causes the java keycloak adapter to formulate incorrect > redirect_uri's and breaks the standard OIDC flow. > > We are running pax-web-undertow as part of the Redhat JBoss Fuse 7.4.0 > distribution. > > I applied a fix to the web-7.3.3 tag and have tested it successfully in > our environment. Find attached my changes for possible inclusion in > an upcoming 7.3.x release. > > Hannes > > > -- > -- > ------------------ > OPS4J - http://www.ops4j.org - [email protected] > > --- > You received this message because you are subscribed to the Google Groups > "OPS4J" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ops4j/f380a9e8-e944-4c4c-b959-a1c43c77f5d1%40googlegroups.com > <https://groups.google.com/d/msgid/ops4j/f380a9e8-e944-4c4c-b959-a1c43c77f5d1%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- -- ------------------ OPS4J - http://www.ops4j.org - [email protected] --- You received this message because you are subscribed to the Google Groups "OPS4J" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ops4j/CAAdXmhq7Z0JYrZuXYnyue-M1uw%2BratKyE8z3KnGny91izqbtqA%40mail.gmail.com.
