[keycloak-user] authz-rest-employee quickstart: fails to query Protection API for employee resource (/api/alice doesn't match /api/{employee}/*)

[Milan Simonovic]

Hi all,

the resource server from https://github.com/keycloak/keycloak-quickstarts/tree/latest/app-authz-rest-employee <https://github.com/keycloak/keycloak-quickstarts/tree/latest/app-authz-rest-employee> quickstart hits keycloak twice on each api call (/api/alice), quering the protection api for a resource:



and both times the response is empty ([]). 

Where does these params come from? I don’t see matchingUri and deep defined at https://www.keycloak.org/docs/latest/authorization_services/index.html#querying-resources <https://www.keycloak.org/docs/latest/authorization_services/index.html#querying-resources> 

How should the call look like to /api/alice would match the resource’s /api/{employee}/* uri?

regards,
Milan