Authorization + Keycloak + Spring Boot

[chatura mohotti]

Hi,

I'm using Keycloak to authorize resources. I have configured resources, permissions and policies in the intended client(in my case "app-client"). And below is my spring boot configuration.

keycloak.realm=rbac-test
keycloak.resource=app-client
keycloak.auth-server-url=http://localhost:8180/auth
keycloak.credentials.secret=3fa72f1b-9fbd-4301-af0c-0a6796a3d6d2
keycloak.use-resource-role-mappings = true
keycloak.cors=true

keycloak.policy-enforcer-config.enforcement-mode=ENFORCING

I'm using "eycloak-spring-boot-starter" 15.0.2.

When I access the rest endpoint through postman using access-token, it throws 403 forbidden message. 

Can anyone help me on that?

Cheers,

Chathura Mohotti.

[Steven Ooi]

Is the logs shows that policy enforcer path config retrieved from keycloak server?

you can print org.keycloak = TRACE for more debugging info.