[keycloak-user] Securing an endpoint using Wildfly-Swarm, Keycloak and MP-JWT-Auth

[Dennis Bayer]

Hi there,

I did some debugging and might have found the issue. It seems that the
keycloak logic has some issues with passing the roles (I added an update to
the project readme located at
https://github.com/DennisBayer/playground-mp-jwt-auth.git).

Any feedback is appreciated.

Best regards.

PS: The bug is filed under https://issues.jboss.org/browse/KEYCLOAK-7309

Dennis Bayer <Dennis.Bayer.82+keycloak-user at gmail.com> schrieb am Fr., 27.
Apr. 2018 um 15:02 Uhr:

> Hi there,
>
> I hope this is the right place to raise my question. Currently I am having
> some problems to get my example working. The authentication works fine, but
> the authorization fails, because the roles are omitted during the request.
>
> Thus it's mostly easier to have a reproducible example than writing a wall
> of text, I created a project (
> https://github.com/DennisBayer/playground-mp-jwt-auth).
>
> I'd appreciate any hints pointing out what is going wrong.
>
> In addition I already raised this question in the mp-jwt-auth-project (
> https://github.com/eclipse/microprofile-jwt-auth/issues/89)/gitter room (
> https://gitter.im/eclipse/microprofile-bom#). At first glimpse, the usage
> of the mp-jwt-auth seems to be ok according to one of the microprofile
> members (he said he's not an expert on jwt) and he pointed me to the
> keycloak mailing list.
>
> Thanks in advance and best regards
>
> Dennis
>