feat(ap1): enforce resource audience

2026-07-25 14:11:28 +09:00
parent c048d00994
commit 84a9ca3e8f
10 changed files with 194 additions and 2 deletions
@@ -51,7 +51,22 @@
      "attributes": {
        "pkce.code.challenge.method": "S256",
        "post.logout.redirect.uris": "http://localhost:8088/*##http://127.0.0.1:8088/*"
-      }
+      },
+      "protocolMappers": [
+        {
+          "name": "keycloak-pattern-api-audience",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-audience-mapper",
+          "consentRequired": false,
+          "config": {
+            "included.custom.audience": "keycloak-pattern-api",
+            "id.token.claim": "false",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "false",
+            "introspection.token.claim": "true"
+          }
+        }
+      ]
    },
    {
      "clientId": "token-mediating-confidential",