feat: implement "hostname-backchannel-dynamic" Keycloak option

Author: vincentchalamon

api/src/Security/Http/Protection/ResourceResourceHandler.php

@@ -48,7 +48,7 @@ public function create(object $resource, UserInterface $owner, array $context =
                 'owner' => $owner->getUserIdentifier(),
             ],
         ]);
-        if ($response->getStatusCode() !== 200) {
+        if (200 !== $response->getStatusCode()) {
             dump($response->toArray(false));
         }
     }

compose.e2e.yaml

@@ -6,7 +6,7 @@ services:
       KC_LOG_LEVEL: "debug"
       KEYCLOAK_HTTPS_CERTIFICATE_FILE: /opt/bitnami/keycloak/certs/tls.crt
       KEYCLOAK_HTTPS_CERTIFICATE_KEY_FILE: /opt/bitnami/keycloak/certs/tls.key
-      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --import-realm"
+      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true --import-realm"
     volumes:
       - ./helm/api-platform/keycloak/certs/tls.crt:/opt/bitnami/keycloak/certs/tls.crt:ro
       - ./helm/api-platform/keycloak/certs/tls.pem:/opt/bitnami/keycloak/certs/tls.key:ro

compose.override.yaml

@@ -57,7 +57,7 @@ services:
       context: ./helm/api-platform/keycloak/
       target: keycloak
     environment:
-      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --import-realm"
+      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true --import-realm"
     volumes:
       - ./helm/api-platform/keycloak/themes/api-platform-demo:/opt/bitnami/keycloak/themes/api-platform-demo
       - ./helm/api-platform/keycloak/config:/opt/bitnami/keycloak/data/import

compose.yaml

@@ -105,7 +105,7 @@ services:
       KEYCLOAK_HOSTNAME: https://${SERVER_NAME:-localhost}/oidc/
       KEYCLOAK_HOSTNAME_ADMIN: https://${SERVER_NAME:-localhost}/oidc/
       KEYCLOAK_ENABLE_HEALTH_ENDPOINTS: "true"
-      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\""
+      KEYCLOAK_EXTRA_ARGS: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true"
     # https://www.keycloak.org/server/all-config#category-health
     healthcheck:
       test: [ "CMD-SHELL", "curl http://127.0.0.1:8080/oidc/health || exit 1"]

helm/api-platform/values.yaml

@@ -117,7 +117,7 @@ keycloak:
     - name: KEYCLOAK_PRODUCTION
       value: "true"
     - name: KEYCLOAK_EXTRA_ARGS
-      value: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\""
+      value: "--features=\"hostname:v2,scripts,persistent-user-sessions:v1\" --hostname-backchannel-dynamic=true"
   # must finish with a trailing slash (https://github.com/bitnami/charts/issues/10885#issuecomment-1414279144)
   httpRelativePath: /oidc/
   proxy: edge