Consider deep role mappings when verifying user roles in auth-require-role-extension

[fnkr]

A user can have permission to use a role even if the role is not attached to the user directly. For example, a user might be in a group that has access to a role, or a user might have access to a role through composite roles.

Luckily RoleUtils has a function to resolve deep user role mappings.

• https://www.keycloak.org/docs-api/9.0/javadocs/org/keycloak/models/utils/RoleUtils.html

[danifr]

I opened exactly the same reuqest a couple of weeks ago. https://github.com/thomasdarimont/keycloak-extension-playground/pull/7

[fnkr]

@thomasdarimont Hi, can you take a look at this please?