Re: [keycloak-user] How to authorize JAX-RS service based on reasteasy

Where are your roles defined? At the realm level? At the application level? If they are defined at the realm level you need to define a scope for the application. Go to the admin console. The application link for your front-end application. Go to the scope menu item and add the realm roles to the scope for the front-end application> Build and deploy the preconfigured demo and view the realm in the admin > console. You will see a similar setup where the "customer-portal" and > "product-portal" apps have their scope set to the realm level roles.> Scope is the set of roles an application or oauth client is allowed to > ask for.