{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2299","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2299/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2299/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2299/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2299","id":122197563,"number":2299,"title":"Clients with Internal Urls and External url using proxy configuration","user":{"login":"pessimca","id":13974203,"avatar_url":"https://avatars.githubusercontent.com/u/13974203?v=3","gravatar_id":"","url":"https://api.github.com/users/pessimca","html_url":"https://github.com/pessimca","followers_url":"https://api.github.com/users/pessimca/followers","following_url":"https://api.github.com/users/pessimca/following{/other_user}","gists_url":"https://api.github.com/users/pessimca/gists{/gist_id}","starred_url":"https://api.github.com/users/pessimca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pessimca/subscriptions","organizations_url":"https://api.github.com/users/pessimca/orgs","repos_url":"https://api.github.com/users/pessimca/repos","events_url":"https://api.github.com/users/pessimca/events{/privacy}","received_events_url":"https://api.github.com/users/pessimca/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-12-15T05:36:30Z","updated_at":"2015-12-22T03:02:21Z","closed_at":null,"body":"Hi,\r\n\r\nWe have proxy server and another url on top of internal url (with LB) for client. My internal url is working good. But getting below error when i access with my proxy server url:\r\nIDX10311: RequireNonce is 'true' (default) but validationContext.Nonce is null. A nonce cannot be validated. If you don't need to check the nonce, set OpenIdConnectProtocolValidator.RequireNonce to 'false'.\r\n\r\nHere is my configurarion:\r\nProxy: https://my-test.xx.yyy.com (with single node)\r\ninternal:  https://my-test.yy.zzz.com (with two nodes and LB)\r\n![identity_server_client_config](https://cloud.githubusercontent.com/assets/13974203/11802955/c52f7dd6-a2c3-11e5-8ea4-7332e62e27ef.png)\r\n\r\n\r\nRequests will go to Proxy and will redirect to internal. Can we make dynamic \"RedirectUri\" so i can keep my proxy uri for external request and internal uri for internal request?\r\n\r\nI configured ids redirects from internal url.\r\nI am sure some one might have this issue and fix details. I appreciate all your help.\r\n\r\nThank you."},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/166490047","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2299#issuecomment-166490047","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2299","id":166490047,"user":{"login":"pessimca","id":13974203,"avatar_url":"https://avatars.githubusercontent.com/u/13974203?v=3","gravatar_id":"","url":"https://api.github.com/users/pessimca","html_url":"https://github.com/pessimca","followers_url":"https://api.github.com/users/pessimca/followers","following_url":"https://api.github.com/users/pessimca/following{/other_user}","gists_url":"https://api.github.com/users/pessimca/gists{/gist_id}","starred_url":"https://api.github.com/users/pessimca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pessimca/subscriptions","organizations_url":"https://api.github.com/users/pessimca/orgs","repos_url":"https://api.github.com/users/pessimca/repos","events_url":"https://api.github.com/users/pessimca/events{/privacy}","received_events_url":"https://api.github.com/users/pessimca/received_events","type":"User","site_admin":false},"created_at":"2015-12-22T03:02:21Z","updated_at":"2015-12-22T03:02:21Z","body":"Hi Allen,\r\n\r\nHere is my two urls:\r\n\r\nInternal: https://my-test.int.xxx.com\r\nexternal: https://my-test.ext.xxx.com\r\n\r\nI should be on internal url only When i access internal url. Application should run on internal only.\r\nSame to external. But external requests to redirected to internal url using proxy server.\r\n\r\nCurrently, we are giving redirecturi as https://my-test.int.xxx.com so it is returning to https://my-test.int.xxx.com only. Getting below error when i use  https://my-test.ext.xxx.com\r\nIDX10311: RequireNonce is 'true' (default) but validationContext.Nonce is null. A nonce cannot be validated. If you don't need to check the nonce, set OpenIdConnectProtocolValidator.RequireNonce to 'false'.\r\n\r\nWhat i am looking for is, is there anyway to configure clients for internal and external with proxy with same web servers? Here is the diagram which presents my server configuration:\r\n![2015-12-21_2200](https://cloud.githubusercontent.com/assets/13974203/11946960/711e0846-a82e-11e5-9ead-58812d02c124.png)\r\n\r\nHope this gives you more information.\r\n"}}