fix(keycloak): allow fetch userinfo using internal url (#430)

han-linkx · atinux · web-flow · commit 67aa32126279 · 2025-07-31T15:27:52.000+02:00
Co-authored-by: Sébastien Chopin &lt;seb@nuxt.com&gt;
diff --git a/src/runtime/server/lib/oauth/keycloak.ts b/src/runtime/server/lib/oauth/keycloak.ts
@@ -131,7 +131,7 @@ export function defineOAuthKeycloakEventHandler({
     // TODO: improve typing
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const user: any = await $fetch(
-      `${realmURL}/protocol/openid-connect/userinfo`,
+      `${realmURLInternal}/protocol/openid-connect/userinfo`,
       {
         headers: {
           Authorization: `Bearer ${accessToken}`,

Original file line number	Diff line number	Diff line change
`@@ -131,7 +131,7 @@ export function defineOAuthKeycloakEventHandler({`
`131`	`131`	`// TODO: improve typing`
`132`	`132`	`// eslint-disable-next-line @typescript-eslint/no-explicit-any`
`133`	`133`	`const user: any = await $fetch(`
`134`		- `${realmURL}/protocol/openid-connect/userinfo`,
	`134`	+ `${realmURLInternal}/protocol/openid-connect/userinfo`,
`135`	`135`	`{`
`136`	`136`	`headers: {`
`137`	`137`	Authorization: `Bearer ${accessToken}`,