Add webapp1.internal.s.o to the redirect_uri list
So the link to authenticate in that webapp instance is able to connect the user in keycloak as well. It will be more practical when one uses that instance to check things.
Edited by Antoine R. Dumont