fix(k8s): keep Keycloak's backchannel URLs https behind the labs Caddy (refs #177) #180

Merged

not merged 1 commits from fix/keycloak-proxy-headers into main

2026-09-25 12:30:17 +00:00

Author	SHA1	Message	Date
notandClaude Opus 5.5	61730657e6	fix(k8s): keep Keycloak's backchannel URLs https behind the labs Caddy (refs #177 ) CI / lint (pull_request) Successful in 1m44s Details CI / k8s (pull_request) Successful in 9s Details CI / build (pull_request) Successful in 1m21s Details CI / unit (pull_request) Successful in 1m31s Details CI / frontend (pull_request) Successful in 2m31s Details CI / mutation (pull_request) Successful in 4m47s Details CI / verify-stack (pull_request) Successful in 20m11s Details KC_HOSTNAME_BACKCHANNEL_DYNAMIC builds the token/userinfo/certs URLs from the request, which reaches Keycloak as plain http through the proxy, so browsers blocked them as mixed content after login. Trust X-Forwarded-Proto. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 13:35:39 +02:00