keycloak 11 & nest-keycloak-connect 1.3.0-alpha.3 - fail to get 200 with roles

Hi,

I’m trying to make this project work with latest keycloak docker instance (currently version 11.x).

Using a fresh nestjs project with latest nest-keycloak-connect i’m using the following code :

@Controller()
@Resource('admin')
export class AppController {
  constructor(private readonly appService: AppService) {}

  @Get('admin')
  @Roles('admin')
  getHello(): string {
    return this.appService.getHello();
  }
}

I have setup a keycloak custom realm, with a scope “admin” and a role “admin” under it. Here is the decoded jwt I try to pass to the app :

{
  "exp": 1598143670,
  "iat": 1598143370,
  "jti": "f5b80827-0573-4710-a548-14ace94d1473",
  "iss": "http://localhost:8080/auth/realms/testproject",
  "sub": "e85763bd-281a-4fca-86a0-f7afcaaf46d2",
  "typ": "Bearer",
  "azp": "admin-cli",
  "session_state": "e7b4e27b-8cba-4124-9d41-c1659ceeec23",
  "acr": "1",
  "realm_access": {
    "roles": [
      "admin"
    ]
  },
  "scope": "email admin roles profile",
  "email_verified": true,
  "name": "admin",
  "preferred_username": "admin",
  "given_name": "admin",
  "family_name": "admin",
  "email": "[e-mail]"
}

I also try to add @Scopes(‘admin’), without much more success.

Do I miss something ? Which version of keycloak is supported by this lib ?

Thanks for your help.

[ferrerojosh]

Tickets like this seems to be more rampant, I’ll soon be putting up a proper example project so people won’t get confused later on.

[ferrerojosh]

Any guesses when keycloak 11 support will be released?

I’ll check if there are any breaking changes, then I’ll do a release