[keycloak-user] AT as Query Param

Hi, I've a REST Server secured using bearer-only. Now I'm stuck with the file download usecase (no token in http header). According to KEYCLOAK-2650 <https://issues.jboss.org/browse/KEYCLOAK-2650> it's possible to pass Access Token as a Query Parameter (guess its name is "access_token", right?). On testing that every request I make gets redirected to /sso/login. Am I missing some configuration? It seems that the Keycloak adapter does not try at all to get a token from query param... I'm using keycloak-spring-security-adapter 3.2.1 Thanks in advance, Simon