Thanks Bill, it works. However I noticed that it is using the admin-client as the OAuth
client for granting access to all users in the same realm. i.e. after I created my own
realm, I have to add admin-client to my own realm in order for this to work.
New Question: Do you recommend we use admin-client as a generic OAuth client for getting
the access token, or should each user have their own OAuth client app like what you show
in Keycloak tutorial 3? I am not yet understanding their differences. Using admin-client
OAuth client seems more straightforward without the extra grant page and without the need
to create more OAuth clients. I just want to make sure that it is intended to be use this
way for client making Restful service calls secured by Keycloak. The Keycloak notion still
seems to be exposed a little bit, but it is not too bad.
Thanks for your help.