Make keycloak redirect to https not http (#1111)

* try again * update * Update authMiddleware.ts * Update authMiddleware.ts * format * Update website/src/middleware/authMiddleware.ts --------- Co-authored-by: Cornelius Roemer <cornelius.roemer@gmail.com>
loculus-project · Feb 25, 2024 · 27833ec · 27833ec
1 parent 5308c4a
commit 27833ec
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/kubernetes/loculus/templates/keycloak-deployment.yaml b/kubernetes/loculus/templates/keycloak-deployment.yaml
@@ -46,6 +46,8 @@ spec:
               value: "admin"
             - name: KC_PROXY
               value: "edge"
+            - name: PROXY_ADDRESS_FORWARDING
+              value: "true"
             - name: KC_HEALTH_ENABLED
               value: "true"
             # - name: KC_LOG_LEVEL

diff --git a/website/src/middleware/authMiddleware.ts b/website/src/middleware/authMiddleware.ts
@@ -48,7 +48,7 @@ export async function getKeycloakClient() {
 
 export const getAuthUrl = async (redirectUrl: string) => {
     const authUrl = (await getKeycloakClient()).authorizationUrl({
-        redirect_uri: redirectUrl,
+        redirect_uri: redirectUrl.replace('http://', 'https://'),
         scope: 'openid',
         response_type: 'code',
     });
@@ -306,7 +306,7 @@ function removeTokenCodeFromSearchParams(url: URL): string {
     newUrl.searchParams.delete('session_state');
     newUrl.searchParams.delete('iss');
 
-    return newUrl.toString();
+    return newUrl.toString().replace('http://', 'https://');
 }
 
 async function refreshTokenViaKeycloak(token: TokenCookie): Promise<TokenCookie | undefined> {