# X509 browser Auth, Apache Reverse Proxy, headers forward, Invalid client credentials/ **URL:** \ **Category:** Miscellanaeous\ **Tags:** oidc\ **Created:** [December 18, 2020, 10:20pm UTC](https://forum.keycloak.org/t/x509-browser-auth-apache-reverse-proxy-headers-forward-invalid-client-credentials/6483 "2020-12-18T22:20:08Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![jfahrny](https://avatars.discourse-cdn.com/v4/letter/j/7cd45c/32.png) [@jfahrny](https://forum.keycloak.org/u/jfahrny)\ **Post date:** [December 18, 2020, 10:20pm UTC](https://forum.keycloak.org/t/x509-browser-auth-apache-reverse-proxy-headers-forward-invalid-client-credentials/6483/1 "2020-12-18T22:20:08Z")
Does anyone see problems with the reverse proxy, x509 auth, IDP, Client configs, bindings, etc? My client certificate and key were generated with openssl and is self signed without a CA Issuer. Could that be the problem here? The CN is my username. The DN has username, e-mail, location, org, company, etc. Any help would be greatly appreciated! Thanks in advance! Jim **KeyCloak Logfile** ============================================================== 19:57:20,204 INFO [io.undertow.request.dump] (default task-3) ----------------------------REQUEST--------------------------- URI=/auth/realms/CRG-SSO/login-actions/authenticate characterEncoding=null contentLength=20 contentType=[application/x-www-form-urlencoded] cookie=AUTH\_SESSION\_ID=4290bf95-f994-493b-9644-e6550faeb929.ip-10-0-0-241 cookie=AUTH\_SESSION\_ID\_LEGACY=4290bf95-f994-493b-9644-e6550faeb929.ip-10-0-0-241 cookie=KC\_RESTART=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJjaWQiOiJjb25mbHVlbmNlLW9pZGMiLCJwdHkiOiJvcGVuaWQtY29ubmVjdCIsInJ1cmkiOiJodHRwczovL2NvbmZsdWVuY2UuY3Jlc3RyaWRnZWdyb3VwLmNvbTo4NDQzL3BsdWdpbnMvc2VydmxldC9vYXV0aC9jYWxsYmFjayIsImFjdCI6IkFVVEhFTlRJQ0FURSIsIm5vdGVzIjp7ImNsaWVudF9yZXF1ZXN0X3BhcmFtX2FjY2Vzc190eXBlIjoib2ZmbGluZSIsInNjb3BlIjoib3BlbmlkIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInJlc3BvbnNlX3R5cGUiOiJjb2RlIiwicmVkaXJlY3RfdXJpIjoiaHR0cHM6Ly9jb25mbHVlbmNlLmNyZXN0cmlkZ2Vncm91cC5jb206ODQ0My9wbHVnaW5zL3NlcnZsZXQvb2F1dGgvY2FsbGJhY2siLCJjbGllbnRfcmVxdWVzdF9wYXJhbV9pbmNsdWRlX2dyYW50ZWRfc2NvcGVzIjoidHJ1ZSJ9fQ.2ptaJQWPXTlT3XbfMEZcJnuo8EJLeKQQH5XRWUyni50 cookie=KEYCLOAK\_IDENTITY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJleHAiOjE2MDgzNTY4NTYsImlhdCI6MTYwODMyMDg1NiwianRpIjoiOTczZTYyM2QtZjczNS00MTExLWFhZjMtNTU4ZDhkMjM0MzdlIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInN1YiI6IjRiZmQ2YTQxLTUxMzAtNDJlNy1hZjdlLTkxYWVjZGNmMGIzMSIsInR5cCI6IlNlcmlhbGl6ZWQtSUQiLCJzZXNzaW9uX3N0YXRlIjoiNzRkMjc0ZDctOWRjNS00NzlhLWJlOTItMGNiMjkyZDhlYTgyIiwic3RhdGVfY2hlY2tlciI6IlQxVTNsNnV3akZNelVLYUljZFdFXy1DTldLVWk1aElwTlVCN2tGeEFHb2sifQ.01YTQUfFo8N5jj-kWuS1gdaLUMgn9w-VFfAutkkTz6Q cookie=KEYCLOAK\_IDENTITY\_LEGACY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJleHAiOjE2MDgzNTY4NTYsImlhdCI6MTYwODMyMDg1NiwianRpIjoiOTczZTYyM2QtZjczNS00MTExLWFhZjMtNTU4ZDhkMjM0MzdlIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInN1YiI6IjRiZmQ2YTQxLTUxMzAtNDJlNy1hZjdlLTkxYWVjZGNmMGIzMSIsInR5cCI6IlNlcmlhbGl6ZWQtSUQiLCJzZXNzaW9uX3N0YXRlIjoiNzRkMjc0ZDctOWRjNS00NzlhLWJlOTItMGNiMjkyZDhlYTgyIiwic3RhdGVfY2hlY2tlciI6IlQxVTNsNnV3akZNelVLYUljZFdFXy1DTldLVWk1aElwTlVCN2tGeEFHb2sifQ.01YTQUfFo8N5jj-kWuS1gdaLUMgn9w-VFfAutkkTz6Q cookie=KEYCLOAK\_SESSION=CRG-SSO/4bfd6a41-5130-42e7-af7e-91aecdcf0b31/74d274d7-9dc5-479a-be92-0cb292d8ea82 cookie=KEYCLOAK\_SESSION\_LEGACY=CRG-SSO/4bfd6a41-5130-42e7-af7e-91aecdcf0b31/74d274d7-9dc5-479a-be92-0cb292d8ea82 cookie=ajs\_anonymous\_id=%22e151b174-a5fa-4943-968d-c071225ac7de%22 cookie=ajs\_group\_id=null header=Accept-Encoding=gzip, deflate, br header=Origin=null header=Connection=Keep-Alive [header=SSL\_CLIENT\_S\_DN=emailAddress=jamesf@crestgroup.com](mailto:header=SSL_CLIENT_S_DN=emailAddress=jamesf@crestgroup.com),CN=jamesf,OU=Engineering,O=CrestGroup,L=Parker,ST=Colorado,C=US header=SSL\_CLIENT\_S\_DN\_CN=jamesf header=X-Forwarded-Port=443 header=X-Forwarded-For=76.25.3.15 header=Cookie=AUTH\_SESSION\_ID=4290bf95-f994-493b-9644-e6550faeb929.ip-10-0-0-241; AUTH\_SESSION\_ID\_LEGACY=4290bf95-f994-493b-9644-e6550faeb929.ip-10-0-0-241; KEYCLOAK\_IDENTITY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJleHAiOjE2MDgzNTY4NTYsImlhdCI6MTYwODMyMDg1NiwianRpIjoiOTczZTYyM2QtZjczNS00MTExLWFhZjMtNTU4ZDhkMjM0MzdlIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInN1YiI6IjRiZmQ2YTQxLTUxMzAtNDJlNy1hZjdlLTkxYWVjZGNmMGIzMSIsInR5cCI6IlNlcmlhbGl6ZWQtSUQiLCJzZXNzaW9uX3N0YXRlIjoiNzRkMjc0ZDctOWRjNS00NzlhLWJlOTItMGNiMjkyZDhlYTgyIiwic3RhdGVfY2hlY2tlciI6IlQxVTNsNnV3akZNelVLYUljZFdFXy1DTldLVWk1aElwTlVCN2tGeEFHb2sifQ.01YTQUfFo8N5jj-kWuS1gdaLUMgn9w-VFfAutkkTz6Q; KEYCLOAK\_IDENTITY\_LEGACY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJleHAiOjE2MDgzNTY4NTYsImlhdCI6MTYwODMyMDg1NiwianRpIjoiOTczZTYyM2QtZjczNS00MTExLWFhZjMtNTU4ZDhkMjM0MzdlIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInN1YiI6IjRiZmQ2YTQxLTUxMzAtNDJlNy1hZjdlLTkxYWVjZGNmMGIzMSIsInR5cCI6IlNlcmlhbGl6ZWQtSUQiLCJzZXNzaW9uX3N0YXRlIjoiNzRkMjc0ZDctOWRjNS00NzlhLWJlOTItMGNiMjkyZDhlYTgyIiwic3RhdGVfY2hlY2tlciI6IlQxVTNsNnV3akZNelVLYUljZFdFXy1DTldLVWk1aElwTlVCN2tGeEFHb2sifQ.01YTQUfFo8N5jj-kWuS1gdaLUMgn9w-VFfAutkkTz6Q; KEYCLOAK\_SESSION=CRG-SSO/4bfd6a41-5130-42e7-af7e-91aecdcf0b31/74d274d7-9dc5-479a-be92-0cb292d8ea82; KEYCLOAK\_SESSION\_LEGACY=CRG-SSO/4bfd6a41-5130-42e7-af7e-91aecdcf0b31/74d274d7-9dc5-479a-be92-0cb292d8ea82; KC\_RESTART=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.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.2ptaJQWPXTlT3XbfMEZcJnuo8EJLeKQQH5XRWUyni50; ajs\_group\_id=null; ajs\_anonymous\_id=%22e151b174-a5fa-4943-968d-c071225ac7de%22 header=SSL\_CLIENT\_CERT=-----BEGIN CERTIFICATE----- MIIEMTCCAxmgAwIBAgIUEjOrRqXPM1RgpHNNxQtclYyb4RAwDQYJKoZIhvcNAQEL BQAwgacxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhDb2xvcmFkbzEPMA0GA1UEBwwG UGFya2VyMRgwFgYDVQQKDA9DcmVzdHJpZGdlR3JvdXAxFDASBgNVBAsMC0VuZ2lu ZWVyaW5nMRQwEgYDVQQDDAtqYW1lc2ZhaHJueTEuMCwGCSqGSIb3DQEJARYfamFt ZXNmYWhybnlAY3Jlc3RyaWRnZWdyb3VwLmNvbTAeFw0yMDExMjYwMDI2NDRaFw0y MTExMjYwMDI2NDRaMIGnMQswCQYDVQQGEwJVUzERMA8GA1UECAwIQ29sb3JhZG8x DzANBgNVBAcMBlBhcmtlcjEYMBYGA1UECgwPQ3Jlc3RyaWRnZUdyb3VwMRQwEgYD VQQLDAtFbmdpbmVlcmluZzEUMBIGA1UEAwwLamFtZXNmYWhybnkxLjAsBgkqhkiG 9w0BCQEWH2phbWVzZmFocm55QGNyZXN0cmlkZ2Vncm91cC5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy/miH1DcP7hLT5O+ilDmhrXcvfNoQHgHo ZRlDezuNwPa+Yv45FIT8aJ3lYPej/ySS2AolV68xfMRmU7n0b8av24R7oKDVLZz+ OfJbY8V7Hnsl8DzRXaxIBGNrPPCwRqgim3LUwfXz/2IgxSsLoY2VIiqJE/RfrDuU IgrxwuOVUB/p4F0Q2Gy1Dba3Bzn1ABDuxNeRftGHYmHPByY5FF/uUUaTa+xwHMo9 PpkyvXKniWswV6/cU8V9JGgC0UNwbE3U7/TJykDzYijSktA5It4ivPs9TJi2vs1Q 8c2zYYM+tQxJajVet0f24T/s6aoOgOK/Ew9mL/C2MPGC8R4mK5C3AgMBAAGjUzBR MB0GA1UdDgQWBBT35uItGYECTZPfT2QKIBYysdZ6PjAfBgNVHSMEGDAWgBT35uIt GYECTZPfT2QKIBYysdZ6PjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUA A4IBAQBHjDcYvIK8+/VHGJbtwISdw6R+mhCntG+2KT7qGYd0XdzmnxV78frV2rLI hA94Nnm4bUtTwlHW9zRwGVI3GrOfl0VW8b7xJWgXPIvODHZ0XZERQT9iMV1nr3Lz CRDot3i0od2CqpB8LLglhNZFJOfR9ZbPmdBBqRdeejoG0l2X4HCCQ46aT4T0dMq8 Rp99GJTOeYQ/WbBUdyzAxLIWQxt6PUkgXVuR9KdhFKCXcKyHhUUu37bvZy64J7jY Jpn0WWuFNZ17rJCpiNEGB/EemnDLDvNo8T0NaQI0Iae/wFJSXEPJtDle8PoIumbL cGMGsVyncYzIQ7bfhRobju15SiHd -----END CERTIFICATE----- header=Host=keycloak.crestgroup.xyz header=X-Forwarded-Host=keycloak.crestgroup.xyz header=Accept=text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,_/_;q=0.8 header=Accept-Language=en-US,en;q=0.5 header=X-Forwarded-Server=keycloak.crestgroup.xyz header=SSL\_CLIENT\_I\_DN=emailAddress=jamesf@crestgroup.xyz,CN=jamesf,OU=Engineering,O=Crestgroup,L=Parker,ST=Colorado,C=US header=User-Agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:83.0) Gecko/20100101 Firefox/83.0 header=X-Forwarded-Proto=https header=Content-Type=application/x-www-form-urlencoded header=Content-Length=20 header=Upgrade-Insecure-Requests=1 header=SSL\_SERVER\_S\_DN\_OU=(null) locale=[en\_US, en] method=POST parameter=client\_id=confluence-oidc parameter=execution=8fdd92d1-a543-4228-8f85-7fcef6b43d3f parameter=session\_code=LLRePDWkHgpuwQc1bos81RRVLGpAvdYTZs99Vv9SBF4 parameter=tab\_id=2hUQZumrkVs protocol=HTTP/1.1 queryString=session\_code=LLRePDWkHgpuwQc1bos81RRVLGpAvdYTZs99Vv9SBF4&execution=8fdd92d1-a543-4228-8f85-7fcef6b43d3f&client\_id=confluence-oidc&tab\_id=2hUQZumrkVs remoteAddr=/76.25.X.Y:0 remoteHost=76.25.X.Y scheme=https host=keycloak.crestgroup.xyz serverPort=443 isSecure=true body= username=jamesf --------------------------RESPONSE-------------------------- contentLength=0 contentType=null header=Cache-Control=no-store, must-revalidate, max-age=0 header=Set-Cookie=KEYCLOAK\_LOCALE=; Version=1; Comment=Expiring cookie; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/CRG-SSO/; Secure; HttpOnly header=Set-Cookie=KC\_RESTART=; Version=1; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/CRG-SSO/; Secure; HttpOnly header=Set-Cookie=KEYCLOAK\_IDENTITY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJleHAiOjE2MDgzNTc0NDAsImlhdCI6MTYwODMyMTQ0MCwianRpIjoiZDM2MGQ4NGQtNGI2MC00ZDUxLWI2NTMtNTYzNGRkZTg0NWVlIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInN1YiI6IjRiZmQ2YTQxLTUxMzAtNDJlNy1hZjdlLTkxYWVjZGNmMGIzMSIsInR5cCI6IlNlcmlhbGl6ZWQtSUQiLCJzZXNzaW9uX3N0YXRlIjoiNDI5MGJmOTUtZjk5NC00OTNiLTk2NDQtZTY1NTBmYWViOTI5Iiwic3RhdGVfY2hlY2tlciI6InVSREY5U0YtSGlMNFJOTUVPZDhPeU8xblRldUN2R1pLbkROSW40NXNFTGsifQ.ZildDOKVuyjl1g3UG6TRmgFTacK8Qc7niF7uMP\_F4PA; Version=1; Path=/auth/realms/CRG-SSO/; SameSite=None; Secure; HttpOnly header=Set-Cookie=KEYCLOAK\_IDENTITY\_LEGACY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxNWNlM2UyZi1jMDhlLTRhZDMtOTBjOC1mNjA4MGNmNjA3N2MifQ.eyJleHAiOjE2MDgzNTc0NDAsImlhdCI6MTYwODMyMTQ0MCwianRpIjoiZDM2MGQ4NGQtNGI2MC00ZDUxLWI2NTMtNTYzNGRkZTg0NWVlIiwiaXNzIjoiaHR0cHM6Ly9lbmNsYXZlLmNyZXN0cmlkZ2Vncm91cC5jb20vYXV0aC9yZWFsbXMvQ1JHLVNTTyIsInN1YiI6IjRiZmQ2YTQxLTUxMzAtNDJlNy1hZjdlLTkxYWVjZGNmMGIzMSIsInR5cCI6IlNlcmlhbGl6ZWQtSUQiLCJzZXNzaW9uX3N0YXRlIjoiNDI5MGJmOTUtZjk5NC00OTNiLTk2NDQtZTY1NTBmYWViOTI5Iiwic3RhdGVfY2hlY2tlciI6InVSREY5U0YtSGlMNFJOTUVPZDhPeU8xblRldUN2R1pLbkROSW40NXNFTGsifQ.ZildDOKVuyjl1g3UG6TRmgFTacK8Qc7niF7uMP\_F4PA; Version=1; Path=/auth/realms/CRG-SSO/; Secure; HttpOnly header=Set-Cookie=KEYCLOAK\_SESSION=CRG-SSO/4bfd6a41-5130-42e7-af7e-91aecdcf0b31/4290bf95-f994-493b-9644-e6550faeb929; Version=1; Expires=Sat, 19-Dec-2020 05:57:20 GMT; Max-Age=36000; Path=/auth/realms/CRG-SSO/; SameSite=None; Secure header=Set-Cookie=KEYCLOAK\_SESSION\_LEGACY=CRG-SSO/4bfd6a41-5130-42e7-af7e-91aecdcf0b31/4290bf95-f994-493b-9644-e6550faeb929; Version=1; Expires=Sat, 19-Dec-2020 05:57:20 GMT; Max-Age=36000; Path=/auth/realms/CRG-SSO/; Secure header=Set-Cookie=KEYCLOAK\_REMEMBER\_ME=; Version=1; Comment=Expiring cookie; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/CRG-SSO/; Secure; HttpOnly header=P3P=CP=“This is not a P3P policy!” header=X-XSS-Protection=1; mode=block header=Location=[https://confluence.crestgroup.xyz:8443/plugins/servlet/oauth/callback?session\_state=4290bf95-f994-493b-9644-e6550faeb929&code=08557d03-c777-4aa9-9824-e036a10581b2.4290bf95-f994-493b-9644-e6550faeb929.7a6cf924-df20-4560-8932-db64cd1b54f0](https://confluence.crestgroup.xyz:8443/plugins/servlet/oauth/callback?session_state=4290bf95-f994-493b-9644-e6550faeb929&code=08557d03-c777-4aa9-9824-e036a10581b2.4290bf95-f994-493b-9644-e6550faeb929.7a6cf924-df20-4560-8932-db64cd1b54f0) header=X-Frame-Options=SAMEORIGIN header=Referrer-Policy=no-referrer header=Content-Security-Policy=frame-src ‘self’; frame-ancestors ‘self’; object-src ‘none’; header=Date=Fri, 18 Dec 2020 19:57:20 GMT header=Connection=keep-alive header=X-Robots-Tag=none header=Strict-Transport-Security=max-age=31536000; includeSubDomains header=X-Content-Type-Options=nosniff header=Content-Length=0 status=302 # ============================================================== 19:57:20,355 ERROR [org.keycloak.services] (default task-3) KC-SERVICES0017: Unknown result status 19:57:20,357 WARN [org.keycloak.events] (default task-3) type=CODE\_TO\_TOKEN\_ERROR, realmId=CRG-SSO, clientId=confluence-oidc, userId=null, ipAddress=44.236.226.4, error=invalid\_client\_credentials, grant\_type=authorization\_code 19:57:20,363 INFO [io.undertow.request.dump] (default task-3) ----------------------------REQUEST--------------------------- URI=/auth/realms/CRG-SSO/protocol/openid-connect/token characterEncoding=null contentLength=326 contentType=[application/x-www-form-urlencoded] header=Accept-Encoding=gzip,deflate header=Connection=Keep-Alive header=SSL\_CLIENT\_S\_DN=(null) header=SSL\_CLIENT\_S\_DN\_CN=(null) header=X-Forwarded-Port=443 header=X-Forwarded-For=44.236.226.4 header=SSL\_CLIENT\_CERT=(null) header=Host=keycloak.crestgroup.xyz header=X-Forwarded-Host=keycloak.crestgroup.xyz header=accept=application/json header=X-Forwarded-Server=keycloak.crestgroup.xyz header=SSL\_CLIENT\_I\_DN=(null) header=User-Agent=Apache-HttpClient/4.5.6 (Java/1.8.0\_261) header=X-Forwarded-Proto=https header=Content-Type=application/x-www-form-urlencoded header=Content-Length=326 header=SSL\_SERVER\_S\_DN\_OU=(null) locale= method=POST protocol=HTTP/1.1 queryString= remoteAddr=/44.236.226.4:0 remoteHost=ec2-44-236-226-4.us-west.xyz scheme=https host=keycloak IP serverPort=443 isSecure=true body= redirect\_uri=[https://confluence.crestgroup.xyz:8443/plugins/servlet/oauth/callback](https://confluence.crestgroup.xyz:8443/plugins/servlet/oauth/callback) grant\_type=authorization\_code code=08557d03-c777-4aa9-9824-e036a10581b2.4290bf95-f994-493b-9644-e6550faeb929.7a6cf924-df20-4560-8932-db64cd1b54f0 client\_id=confluence-oidc client\_secret=6cd00d38-4ec7-4561-b76c-1d2957685fe0 --------------------------RESPONSE-------------------------- contentLength=74 contentType=application/json header=Cache-Control=no-store header=X-XSS-Protection=1; mode=block header=Pragma=no-cache header=X-Frame-Options=SAMEORIGIN header=Referrer-Policy=no-referrer header=Date=Fri, 18 Dec 2020 19:57:20 GMT header=Connection=keep-alive header=Strict-Transport-Security=max-age=31536000; includeSubDomains header=X-Content-Type-Options=nosniff header=Content-Type=application/json header=Content-Length=74 status=400 **X509 Auth Config** ![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/7/7f43300b8f79c00e101d25dfeceef05ef8655382.png)