عرض عملي: تحويل Shop إلى رموز صادرة من Keycloak

خطوة بخطوة

1. Remove the self-issued login endpoint and key from Shop.
2. Set issuer-uri to the Keycloak realm.
3. Add a converter that maps realm roles to ROLE_ authorities.
4. Call the API with a Keycloak token and see 200 for customer and admin as expected.
5. Planned mistake: sending the ID token to the API. Explain why the audience or claims do not fit, and use the access token.
6. Confirm an old self-issued token now returns 401.