Keycloack integration

[seatsurfing]

Keycloack integration

[fashberg]

Hi,
can seatsurfing-backend really access "http://localhost:8081/realms/bob/protocol/openid-connect/token"?

Looks on misconfigured keyclock, check https://keycloak.xxx.tld/auth/realms/bob/.well-known/openid-configuration
At "token_endpoint" you should read the tokenurl. That endpoint must be reachable for seatsurfing backend (container).

[lifetooeasy]

@fashberg thank you for looking into it. Actually, the redirect to keycloack works fine and I am able to authenticate:

Doesn't mean the the token_url is reachable from the backend container?

seat surfing containers and keycloack are running in the same host with different ports.

For information, the configuration link is now (keycloack 22.0.4) at https://keycloak.xxx.tld/realms/bob/.well-known/openid-configuration and not at
https://keycloak.xxx.tld/auth/realms/bob/.well-known/openid-configuration --> no /auth/

Does it bring something if changing this line:

https://github.com/seatsurfing/backend/blob/72ff3fa9bd0aa5c032dfa29d488d6a4281971c5f/server/auth-router.go#L530C10-L530C10

[Update]

Modifying the previous line I now see a blank page, I believe the correct redirectUrl is missing somewhere.

[fashberg]

You've wrote "I am using docker compose to test seatsurfing".
Imho: seatsurfing runs in its own container and each container has its own localhost. Docker basics.

From seatsurfing container you have to be able to reach keycloak container.
OpenId requires users (browsers) and app-server (seatsurfing) to talk to openid server. Backend has to access the token.

[lifetooeasy]

Same issue now backend and keycloack in different machines and different hostnames (not running on localhost) with token endpoint accessible from backend container.
Login successful, redirect -> blank page.

The url looks like this:

http://seatsurfing.xxx.tld/811fc34e-d32d-4c5b-80ef-aaf890d9992a/callback?state=c2013fc8-af6c-4533-8fe5-923cfe612dda&session_state=2039cb12-14c1-4efd-b8d8-429fb7077190&code=9cb63aed-0126-41e2-b451-d7a62bddcd86.2039cb12-14c1-4efd-b8d8-429fb7077190.8491b1c6-555b-4a07-b9df-d6294067d3c1