Saya proxy mai fita na Keycloak don dillancin shaida

Saita yanayin proxy mai fita na uwar garke kuma yi amfani da fifikon masu canji na Keycloak yayin binciken musayar token.

Burowza ya isa shafin shiga na mai bayar da shaida; uwar garken Keycloak yana musayar lambar da aka mayar. Idan wannan musayar ta gaba ba za ta iya haɗawa ba, saka hanyar proxy a cikin tsarin Keycloak ko yanayin kwano kafin farawa:

HTTPS_PROXY=http://proxy.example:8080
NO_PROXY=localhost,internal.example

Don hanyar HTTP ta jama'a, adireshi daga jerin proxy na HTTP yana shiga HTTPS_PROXY; riƙe wuraren da aka yi niyya don wucewa. URL ɗin token ya kasance ƙarshen wurin mai bayar da shaida, ba adireshin proxy ba.

Fifikon Keycloak ya bambanta da taswirar bisa tsarin manufa:

  • Idan duka HTTP_PROXY da HTTPS_PROXY an ayyana su, HTTPS_PROXY ke cin nasara.
  • Siffofin ƙananan haruffa suna da fifiko bisa manyan haruffa.
  • NO_PROXY an raba shi da waƙafi, kuma sunan mai masaukin ya keɓe ƙananan yankunansa.

Duba duk waɗannan abubuwan shigar idan uwar garken ta zaɓi hanyar da ba a zata ba. Saitunan proxy na burowza ba sa samar da wannan yanayi.

Da zarar haɗin ya yi aiki, gazawar tabbatarwar TLS ta shafi tsarin amincewa ta hanyar ƙofar truststore ta Keycloak. Canza hanyar ba zai iya kafa amincewar takardar shaidar da ta ɓace ba.

Labarai masu alaƙa