feat(ap2): hand off access token only

2026-07-25 14:28:56 +09:00
parent 774f492750
commit bd48516e0f
14 changed files with 402 additions and 8 deletions
@@ -75,7 +75,22 @@
      ],
      "attributes": {
        "post.logout.redirect.uris": "http://localhost:8082/*"
-      }
+      },
+      "protocolMappers": [
+        {
+          "name": "keycloak-pattern-api-audience",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-audience-mapper",
+          "consentRequired": false,
+          "config": {
+            "included.custom.audience": "keycloak-pattern-api",
+            "id.token.claim": "false",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "false",
+            "introspection.token.claim": "true"
+          }
+        }
+      ]
    },
    {
      "clientId": "bff-confidential",