'"Invalid return_url" (Bad Request 400) after loging in to ArgoCD via Keycloak

I am trying to authenticate in ArgoCD using Keycloak. I am following this guide, but there is a problem. ArgoCD redirects me to http://URL/auth/login?return_url=... which throws this Bad Request 400 - Invalid return_url. The correct link though is http://URL/login?return_url=..., but I don't see where I should change it so it doesn't append auth to the path.

The Valid Redirect URIs field is set to * in the Keycloak client for ArgoCD.



Solution 1:[1]

I had the same problem when I redeployed Argo CD and changed the new url. As far as I remember, it's not safe to use * for Valid Redirect URIs , what I did is put https://your_domain/*

After that, I got some weird error: unknown app state xxxxx, and I saw the configMap is wrong, it should be clientSecret: $oidc.keycloak.clientSecret

but I'm using Helm, so it was only .keycloak.clientSecret

Solution 2:[2]

I had the same issue, the culprit: the missing “url: https//:yourargocdurl” in the comfigMap argocd-cm

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1
Solution 2 Ultralite