0

Have Integrated a Java struts based server side application with a keycloak OIDC and Oauth provider.

Java servlet adapter mentioned in the https://access.redhat.com/documentation/en-us/red_hat_single_sign-on_continuous_delivery/3/html-single/securing_applications_and_services_guide/index#servlet_filter_adapter is used for the same implemetation.

The redirect_uri configured on the server is something like https://env.application.com/contextpath/

When the we application session timeouts and the user clicks on any link in the application the redirect_uri that goes as part of authorization code grant flow adds the URI of the link in addition to the redirect_uri configured in keycloak server. This will something like for example https://env.application.com/contextpath**/submenu?name=menu**

This will result in an invalid redirect_uri error from the keycloak server.

The keycloak server doesn't allow to configure a placeholder * to be configured for security reasons.

Could someone please let me know how to handle we application session timeouts with integrated with keycloak OIDC and OAUTH provider.

Is there any other best practise availble to handle session timeouts in webapplications integrated with keyclaok OIDC.

sreenath
  • 1
  • 1
  • 3

0 Answers0