Details
-
Feature
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
2.5.8, 2.6.5
-
None
Description
Current Situation
The Keycloak identity service in JOC Cockpit makes uses of rest api calls to a Keycloak server.
With Keycloak version < 17 the endpoints start with a constant relative part "/auth"
With Keycloak version >= 17 the endpoints no longer do have the relative part.
Therefore authentication with Keycloak version >= 17 will show this error message in the JOC Cockpit log
com.sos.joc.exceptions.JocException:
{"error":"RESTEASY003210: Could not find resource for full path: https://host:port/auth/realms/JOC/protocol/openid-connect/token"}: Could not login
Desired Behavior
It should be possible to configure the compatibility mode for Keycloak versions <17
Workaround
set KC_HTTP_RELAITVE_PATH=/auth
in the Keycloak environment.