# About BrowZer deployment **URL:** \ **Category:** BrowZer\ **Created:** [December 1, 2023, 1:58am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853 "2023-12-01T01:58:53Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![jason-webcomm](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jason-webcomm/32/1589_2.png) [@jason-webcomm](https://openziti.discourse.group/u/jason-webcomm)\ **Post date:** [December 1, 2023, 1:58am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/1 "2023-12-01T01:58:53Z")
Hi, i'm trying deployment BrowZer on GCP that configure with keycloak. after deploy, i got the following error. Error to fetch. but i verify the fetch url is correct. Is it possible about CORS? or any other possible reason? ![tempImageiDiedp](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/c/c53669b3f769e739d49a64faaeb2547381a996ff.jpeg) ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [December 1, 2023, 2:08am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/2 "2023-12-01T02:08:17Z")
Hi @jason-webcomm, welcome to the community, to OpenZiti, and to Browzer! This looks like the sorta thing we'll need @curt to scrutinize. It looks to me that things are setup properly. I see your wildcard domain is set to a CNAME -\> A Record but that seems like it should be fine. I've only ever set it up a an A Record only, but it seems like what you did should be totally reasonable. Your certs are all valid and seem setup correctly too. It sure look ok to me at a glance so we'll need Curt here. 🙂 ---
**Author:** ![curt](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/curt/32/6_2.png) [@curt](https://openziti.discourse.group/u/curt)\ **Post date:** [December 1, 2023, 3:04am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/3 "2023-12-01T03:04:32Z")
@woodwardjd if you look at the dev tools network trace, do you see a 401 on the request to `https://ctrl.ziti.webcomm.com.tw:8441/edge/client/authenticate?method=ext-jwt` ? ---
**Author:** ![woodwardjd](https://avatars.discourse-cdn.com/v4/letter/w/ac91a4/32.png) [@woodwardjd](https://openziti.discourse.group/u/woodwardjd)\ **Post date:** [December 1, 2023, 3:22am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/4 "2023-12-01T03:22:15Z")
@curt tagged wrong jason 🙂 ---
**Author:** ![jason-webcomm](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jason-webcomm/32/1589_2.png) [@jason-webcomm](https://openziti.discourse.group/u/jason-webcomm)\ **Post date:** [December 1, 2023, 3:29am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/5 "2023-12-01T03:29:27Z")
@curt Hi after few test, if I open chrome on Incognito mode, that will show error fetch. when i open normal mode, that will show as below. there is no error message, but browser doesn't redirect to authentication page on keycloak. ![tempImageiSkKzL](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/6/6e7286384abb3cda45c1b5d77920d90aa90c317c.jpeg) ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [December 1, 2023, 3:36am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/6 "2023-12-01T03:36:47Z")
Ahhh you're using KeyCloak. I don't know if we've ever successfully gotten that to work yet. The last time I had tried, the oidc endpoint for authorization is not at the same place as other endpoints. @curt we don't claim to support KeyCloak yet, do we? ---
**Author:** ![curt](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/curt/32/6_2.png) [@curt](https://openziti.discourse.group/u/curt)\ **Post date:** [December 1, 2023, 3:47am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/7 "2023-12-01T03:47:14Z")
@woodwardjd Oops. Please forgive me ☹ So many Jasons. So little time. ---
**Author:** ![curt](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/curt/32/6_2.png) [@curt](https://openziti.discourse.group/u/curt)\ **Post date:** [December 1, 2023, 3:48am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/8 "2023-12-01T03:48:57Z")
@jason-webcomm if you look at the dev tools network trace, do you see a 401 on the request to [https://ctrl.ziti.webcomm.com.tw:8441/edge/client/authenticate?method=ext-jwt](https://ctrl.ziti.webcomm.com.tw:8441/edge/client/authenticate?method=ext-jwt) ? ---
**Author:** ![curt](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/curt/32/6_2.png) [@curt](https://openziti.discourse.group/u/curt)\ **Post date:** [December 1, 2023, 3:51am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/9 "2023-12-01T03:51:35Z")
@TheLumberjack I will admit to not having tested with KeyCloak yet. @jason-webcomm have you tried using a free Auth0 account yet? ---
**Author:** ![jason-webcomm](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jason-webcomm/32/1589_2.png) [@jason-webcomm](https://openziti.discourse.group/u/jason-webcomm)\ **Post date:** [December 1, 2023, 3:57am UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/10 "2023-12-01T03:57:03Z")
@curt i review the ziti-browzer-runtime project, that depends on @auth0/auth0-spa-js. I will try to migrate it to keycloak. ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [December 1, 2023, 2:29pm UTC](https://openziti.discourse.group/t/about-browzer-deployment/1853/11 "2023-12-01T14:29:57Z")
> [@jason-webcomm](#): > > I will try to migrate it to keycloak. That sounds amazing. If you get it working, do let us know what/how you did it! 🙂 I'd love to try it.