Lissy93
[BUG] Sharing Keycloak setup, not exactly a bug but certainly felt like one
Environment
Self-Hosted (Docker)
System
Docker 25
Version
3.0
Describe the problem
It wasn't very smooth for me to get Dashy 3.0 and KC 24.0.3 working together, but I kinda got there, so sharing my settings that may help others. Also there's a bit bug like behavior, not sure which side it originate from, or just need a documentation update
Most of Dashy doc are good, here are some crucial details
In TC clients, "Client authentication" must be switched off, otherwise it gets into a redirect loop, or at least that's how it looks like to me.
In TC clients -> Advanced -> OpenID Connect Compatibility Modes, "Exclude Issuer From Authentication Response " must be switched on. Otherwise it redirects to "https://dashy.my.domain/#iss=https://keycloak.my.domain/realms/my-realm"
You can still login to dashy, but refresh, logout will generate in TC error="invalid_redirect_uri"
In TC clients -> Access settings, if you are using multiple dashy pages, you need
- Root URL https://dashy.my.domain/ (with/wo trailing / doesn't matter)
- Valid redirect URIs must be /*
Otherwise other pages will generate in TC error="invalid_redirect_uri"
With above steps, I got KC working ok, but show/hide based on group/role still doesn't work, raised here https://github.com/Lissy93/dashy/issues/1550
Additional info
No response
Please tick the boxes
- [X] You have explained the issue clearly, and included all relevant info
- [X] You are using a supported version of Dashy
- [X] You've checked that this issue hasn't already been raised
- [X] You've checked the docs and troubleshooting guide
- [X] You agree to the code of conduct
If you're enjoying Dashy, consider dropping us a ⭐
🤖 I'm a bot, and this message was automated
Hello all, For anybody using Dashy authentication, please read the following posts:
- https://subract.dev/posts/dashy/
- https://github.com/Lissy93/dashy/issues/668#issuecomment-2024390223
Read carefully before using Dashy exposed to the internet.
Hi I created a PR for this: https://github.com/Lissy93/dashy/pull/1581.
Once it gets merged i'll close this here.
Regarding the Post by subtract, view the recent post by lissy: https://github.com/Lissy93/dashy/discussions/1579
