Keycloak http relative path is hard-coded to /auth

Hi, the link mentioned that from v17 Keycloak removes /auth but our default Keycloak server setup (v26) still included /auth out of the box, and it also didn't come with a default redirect to /auth if it’s missing.
Therefore I suggest we still make /auth the default prefix, but keep it configurable – just as you proposed in the issue.

With !4 existing deployments will need to change their config and append /auth to the configured url. Is that acceptable?

Regarding the standard. There are probably a gazillion of ways on how keycloak can be deployed. The official keycloak container (docs) defaults to no path prefix at all. This is actually how I found the issue (over in 📌 Add integration tests Active ). Maybe if you run keycloak using a preexisting helm chart or ansible playbook, things might be different.

I think it is acceptable to have non-standard paths configured via settings.php, issue merged.

Just stumbled across the Keycloak URL setting in the OpenID Connect module: /admin/config/people/openid-connect/keycloak/edit

So I would suggest we take the value from there and avoid a separate config item.