With Keycloak 17 "/auth" was removed from all endpoints. Thus, endpoints as http://localhost:8080/auth/realms/fdz/protocol/openid-connect/auth have changed to http://localhost:8080/realms/fdz/protocol/openid-connect/auth.
See upgrading guide:
https://www.keycloak.org/docs/latest/upgrading/index.html
Workaround is to use the --http-relative-path '/auth' option with the keycloak start command