From 2e66b87dab7470ae3fd687203d52f0a3d8143931 Mon Sep 17 00:00:00 2001 From: Anthony LC Date: Mon, 15 Dec 2025 15:45:46 +0100 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7(helm)=20add=20OIDC=5FREDIRECT=5FAL?= =?UTF-8?q?LOWED=5FHOSTS=20to=20fix=20authentication=20flow?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add OIDC_REDIRECT_ALLOWED_HOSTS setting to dev and feature environments to properly allow Keycloak redirect callbacks after authentication. --- src/helm/env.d/dev/values.impress.yaml.gotmpl | 1 + src/helm/env.d/feature/values.impress.yaml.gotmpl | 1 + 2 files changed, 2 insertions(+) diff --git a/src/helm/env.d/dev/values.impress.yaml.gotmpl b/src/helm/env.d/dev/values.impress.yaml.gotmpl index 129a4b89..a0301866 100644 --- a/src/helm/env.d/dev/values.impress.yaml.gotmpl +++ b/src/helm/env.d/dev/values.impress.yaml.gotmpl @@ -38,6 +38,7 @@ backend: OIDC_OP_TOKEN_ENDPOINT: https://docs-keycloak.127.0.0.1.nip.io/realms/docs/protocol/openid-connect/token OIDC_OP_USER_ENDPOINT: https://docs-keycloak.127.0.0.1.nip.io/realms/docs/protocol/openid-connect/userinfo OIDC_OP_LOGOUT_ENDPOINT: https://docs-keycloak.127.0.0.1.nip.io/realms/docs/protocol/openid-connect/logout + OIDC_REDIRECT_ALLOWED_HOSTS: "docs.127.0.0.1.nip.io" OIDC_RP_CLIENT_ID: docs OIDC_RP_CLIENT_SECRET: ThisIsAnExampleKeyForDevPurposeOnly OIDC_RP_SIGN_ALGO: RS256 diff --git a/src/helm/env.d/feature/values.impress.yaml.gotmpl b/src/helm/env.d/feature/values.impress.yaml.gotmpl index 050c35ec..b833a65c 100644 --- a/src/helm/env.d/feature/values.impress.yaml.gotmpl +++ b/src/helm/env.d/feature/values.impress.yaml.gotmpl @@ -39,6 +39,7 @@ backend: OIDC_OP_TOKEN_ENDPOINT: https://{{ .Values.feature }}-docs-keycloak.{{ .Values.domain }}/realms/docs/protocol/openid-connect/token OIDC_OP_USER_ENDPOINT: https://{{ .Values.feature }}-docs-keycloak.{{ .Values.domain }}/realms/docs/protocol/openid-connect/userinfo OIDC_OP_LOGOUT_ENDPOINT: https://{{ .Values.feature }}-docs-keycloak.{{ .Values.domain }}/realms/docs/protocol/openid-connect/logout + OIDC_REDIRECT_ALLOWED_HOSTS: "{{ .Values.feature }}-docs.{{ .Values.domain }}" OIDC_RP_CLIENT_ID: docs OIDC_RP_CLIENT_SECRET: ThisIsAnExampleKeyForDevPurposeOnly OIDC_RP_SIGN_ALGO: RS256