@naturzukunft OK, I don't know enough about Keycloak to know why this isn't working. But you're passing along the client's redirect URI; a lot of OAuth servers require that the redirect URI match a pre-registered value. So, that might be one source of the error.