Hi kindly see the below mentioned scenario and result. please advise whether the findings is as per expectations.

1) I created a new service copied the keycloak.json from an existing (registered at keycloak server) webservice project.

I didn't register the new service at key cloak , deployed it on tomcat and executed the program. The new service gets called even if it is not registered at keycloak server.

2) I changed the public shared key.here the new service failed saying token mismatch.

Kindly let me know your thoughts.

Regards,

Satya.