{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet/Security/issues/1808","repository_url":"https://api.github.com/repos/aspnet/Security","labels_url":"https://api.github.com/repos/aspnet/Security/issues/1808/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Security/issues/1808/comments","events_url":"https://api.github.com/repos/aspnet/Security/issues/1808/events","html_url":"https://github.com/aspnet/Security/issues/1808","id":339597600,"node_id":"MDU6SXNzdWUzMzk1OTc2MDA=","number":1808,"title":"Changing domain in client redirect","user":{"login":"bdparrish","id":720788,"node_id":"MDQ6VXNlcjcyMDc4OA==","avatar_url":"https://avatars2.githubusercontent.com/u/720788?v=4","gravatar_id":"","url":"https://api.github.com/users/bdparrish","html_url":"https://github.com/bdparrish","followers_url":"https://api.github.com/users/bdparrish/followers","following_url":"https://api.github.com/users/bdparrish/following{/other_user}","gists_url":"https://api.github.com/users/bdparrish/gists{/gist_id}","starred_url":"https://api.github.com/users/bdparrish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bdparrish/subscriptions","organizations_url":"https://api.github.com/users/bdparrish/orgs","repos_url":"https://api.github.com/users/bdparrish/repos","events_url":"https://api.github.com/users/bdparrish/events{/privacy}","received_events_url":"https://api.github.com/users/bdparrish/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-07-09T20:35:04Z","updated_at":"2018-07-09T20:54:44Z","closed_at":null,"author_association":"NONE","body":"I have a .NET Core application sitting behind NGINX and Keycloak is also behind NGINX.  How do I get my .NET Core application to send a domain to the client that properly redirects the client to the public domain rather than the private domain that is internal to NGINX?\r\n\r\nThis is a docker-compose setup and I am using simple NGINX proxies for the URLs.  I am looking at an event for `OnRedirectToIdentityProvider` inside `AddOpenIdConnect`.\r\n\r\n```\r\nworker_processes 4;\r\n \r\nevents { worker_connections 1024; }\r\n \r\nhttp {\r\n    sendfile on;\r\n \r\n    server {\r\n        listen 80;\r\n\r\n        proxy_connect_timeout 600; \r\n        proxy_send_timeout 600; \r\n        proxy_read_timeout 600; \r\n        send_timeout 600;\r\n \r\n        location / {\r\n            proxy_pass         http://ui/;\r\n            proxy_redirect     off;\r\n            proxy_set_header   Host $host;\r\n            proxy_set_header   X-Real-IP $remote_addr;\r\n            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;\r\n            proxy_set_header   X-Forwarded-Proto $scheme;\r\n            proxy_set_header   X-Forwarded-Host $server_name;\r\n        }\r\n\r\n        location /keycloak/ {\r\n            proxy_pass         http://keycloak:8080/;\r\n            proxy_redirect     off;\r\n            proxy_set_header   Host $host;\r\n            proxy_set_header   X-Real-IP $remote_addr;\r\n            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;\r\n            proxy_set_header   X-Forwarded-Host $server_name;\r\n        }\r\n\r\n        location /auth/ {\r\n            proxy_pass         http://keycloak:8080/auth/;\r\n            proxy_redirect     off;\r\n            proxy_set_header   Host $host;\r\n            proxy_set_header   X-Real-IP $remote_addr;\r\n            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;\r\n            proxy_set_header   X-Forwarded-Host $server_name;\r\n        }\r\n    }\r\n}\r\n```"},"comment":{"url":"https://api.github.com/repos/aspnet/Security/issues/comments/403617180","html_url":"https://github.com/aspnet/Security/issues/1808#issuecomment-403617180","issue_url":"https://api.github.com/repos/aspnet/Security/issues/1808","id":403617180,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMzYxNzE4MA==","user":{"login":"bdparrish","id":720788,"node_id":"MDQ6VXNlcjcyMDc4OA==","avatar_url":"https://avatars2.githubusercontent.com/u/720788?v=4","gravatar_id":"","url":"https://api.github.com/users/bdparrish","html_url":"https://github.com/bdparrish","followers_url":"https://api.github.com/users/bdparrish/followers","following_url":"https://api.github.com/users/bdparrish/following{/other_user}","gists_url":"https://api.github.com/users/bdparrish/gists{/gist_id}","starred_url":"https://api.github.com/users/bdparrish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bdparrish/subscriptions","organizations_url":"https://api.github.com/users/bdparrish/orgs","repos_url":"https://api.github.com/users/bdparrish/repos","events_url":"https://api.github.com/users/bdparrish/events{/privacy}","received_events_url":"https://api.github.com/users/bdparrish/received_events","type":"User","site_admin":false},"created_at":"2018-07-09T20:54:44Z","updated_at":"2018-07-09T20:54:44Z","author_association":"NONE","body":"@Tratcher - I forgot to add that I did have this in `Startup.cs`\r\n\r\n```"}}
{"actor":{"display_login":"bdparrish"}}