Add comment highlighting significance of the realm roles in Keycloak

flawmop · Aug 23, 2024 · a3a9fd2 · a3a9fd2
1 parent 7b8fbeb
commit a3a9fd2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/com/insilicosoft/portal/svc/rip/config/SecurityConfig.java b/src/main/java/com/insilicosoft/portal/svc/rip/config/SecurityConfig.java
@@ -58,6 +58,7 @@ SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
     return http.build();
   }
 
+  // For Keycloak, the below works with a 'realm roles' 'config.claim.name' of just 'roles' (not 'realm_access.roles'!)
   @Bean
   JwtAuthenticationConverter jwtAuthenticationConverter() {
     var jwtGrantedAuthoritiesConverter = new JwtGrantedAuthoritiesConverter();