KeyCloak Authentication: securing services using Authentication tokens

[kohsah]

Once a user logged in the keycloak authentication token needs to be passed on to the service. There needs to be a way to determine:

1) is the token valid 2) is the service accessible via the token 3) use the token information to filter the data appropriately

How this is to be done needs to be documented and implemented with a proof of concept.

[surajpt]

Will use a keycloak node js library and secure our services with the help of middleware.

[kohsah]

Implemented as https://github.com/gawati/gawati-client-server/blob/f6c87d28de4c555915c28dc7282d0af3d505cfd3/gauth.js