Moving the authorized client to JdbcOAuth2AuthorizedClientService makes tokens work across replicas, so the session-in-Redis plus tokens-in-PostgreSQL split holds. The table then shows what sharing cannot fix: the primary key is (client_registration_id, principal_name) with no session in it, so a second login for the same user updates the same row rather than adding one. The refresh token sits in bytea as the raw JWT, readable with convert_from, and logout clears only the Redis session while the plaintext token row and the Keycloak SSO session both survive. The schema itself failed silently first because the default DDL uses blob, which PostgreSQL does not have, and continue-on-error swallowed it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
9 lines
334 B
Plaintext
9 lines
334 B
Plaintext
deployment.apps/bff configured
|
|
deployment "bff" successfully rolled out
|
|
bff-555df79c97-6j86w 1/1 Running 0 44s
|
|
bff-555df79c97-vgg6g 1/1 Running 0 22s
|
|
|
|
=== oauth2_authorized_client 테이블이 생겼는가 ===
|
|
Did not find any relation named "oauth2_authorized_client".
|
|
command terminated with exit code 1
|