title: Keycloak - WhoamI request fails with 403
body: <p>I have tried solving this problem for days now and I can't figure out how.</p>
  <p>I have created a docker instance with keycloak using:</p>
  <pre><code>docker run -p 8080:8080 --name keycloak --net keycloak-network -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin -e KEYCLOAK_FRONTEND_URL=&quot;https://myurl.com/auth&quot; -e KEYCLOAK_LOGLEVEL=DEBUG --env JAVA_OPTS=&quot;-Djboss.bind.address=0.0.0.0&quot; jboss/keycloak
  </code></pre>
  <p>When I open <code>https://myurl.com</code> and click on Administration Console, it correctly prompts the login credentials. But, once I click &quot;login&quot; it gives me a white page. In the Chrome's debugger it says that the request to <code>/auth/admin/master/console/whoami</code> fails with <code>403</code>. Which is weird, because all requests prior to that one, including the token request, work fine.</p>
  <p>However, If I recreate the docker instance with the same command EXCEPT the <code>KEYCLOAK_FRONTEND_URL</code> part, and access the docker with a local address (192.168.1.X) it works just fine.</p>
  <p>I enabled the logging and they both look the same except that the one with the url set doesn't have the following line (and other lines from then on):</p>
  <pre><code> DEBUG [org.keycloak.services.resources.admin.AdminConsole] (default task-1) setting up realm access for a master realm user
  </code></pre>
  <p>But this doesn't allow me to use my public address, outside my organization.
  What am I missing?</p>
  <p>Note: I have replaced the URLs with a fake one for obvious security issues.</p>
  <p>Thanks a lot in advance!!</p>