It seems that something is wrong in how this validation is performed.

This is reproduceable running locally with:

• server url: https://localhost:8443
• resource root url: https://127.0.0.1:8443