Allow redirects to every valid redirect uri

samply · Dec 7, 2023 · 17ac215 · 17ac215
1 parent 967d25f
commit 17ac215
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/central/src/keycloak.rs b/central/src/keycloak.rs
@@ -135,6 +135,7 @@ fn generate_client(name: &str, oidc_client_config: &OIDCConfig, secret: &str) ->
         "id": id,
         "clientId": id,
         "redirectUris": oidc_client_config.redirect_urls,
+        "webOrigins": ["+"], // Will allow all hosts that are named in redirectUris. This is not the same as '*'
         "publicClient": oidc_client_config.is_public,
         "serviceAccountsEnabled": !oidc_client_config.is_public,
         "defaultClientScopes": [