<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Proxy-Headers on IDaaS Book</title><link>https://idaas.xlabs.club/tags/proxy-headers/</link><description>Recent content in Proxy-Headers on IDaaS Book</description><generator>Hugo</generator><language>zh-CN</language><copyright>Copyright (c) 2020-2024 xlabs.club</copyright><lastBuildDate>Tue, 15 Sep 2026 11:16:15 +0800</lastBuildDate><atom:link href="https://idaas.xlabs.club/tags/proxy-headers/index.xml" rel="self" type="application/rss+xml"/><item><title>Keycloak HTTPS Required 错误与反向代理排错指南</title><link>https://idaas.xlabs.club/blog/keycloak-https-required/</link><pubDate>Mon, 01 Apr 2024 00:00:00 +0800</pubDate><guid>https://idaas.xlabs.club/blog/keycloak-https-required/</guid><description>HTTP 访问 Keycloak 直接报 &lt;code&gt;HTTPS required&lt;/code&gt;，或者回跳时报 &lt;code&gt;Invalid parameter: redirect_uri&lt;/code&gt;——多数不是证书问题，而是 Realm 的 Require SSL 与反向代理头没对齐。给出 KC_PROXY_HEADERS / KC_HOSTNAME 最小配置、kcadm 改法，以及为什么不建议直接改库。</description></item></channel></rss>