Дочинили авторизацию

codebase/backend/keycloak/realm/han-chat-realm.json

@@ -60,7 +60,7 @@
       "frontchannelLogout": true,
       "fullScopeAllowed": false,
       "redirectUris": [
-        "https://chat.han0107.ru/oauth/callback",
+        "https://chat.han0107.ru/auth/callback",
         "han-chat://auth/callback"
       ],
       "webOrigins": [
@@ -74,6 +74,20 @@
         "use.refresh.tokens": "true",
         "client.use.lightweight.access.token.enabled": "false"
       },
+      "protocolMappers": [
+        {
+          "name": "subject",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-sub-mapper",
+          "consentRequired": false,
+          "config": {
+            "access.token.claim": "true",
+            "id.token.claim": "true",
+            "userinfo.token.claim": "true",
+            "introspection.token.claim": "true"
+          }
+        }
+      ],
       "defaultClientScopes": ["phone", "han-chat-api"],
       "optionalClientScopes": ["offline_access"]
     }

codebase/backend/keycloak/src/test/java/ru/han/chat/keycloak/RealmContractTest.java

@@ -23,6 +23,7 @@ class RealmContractTest {
         assertTrue(realm.contains("\"included.client.audience\": \"han-chat-api\""));
         assertTrue(realm.contains("\"claim.name\": \"phone_number\""));
         assertTrue(realm.contains("\"claim.name\": \"phone_number_verified\""));
+        assertTrue(realm.contains("\"protocolMapper\": \"oidc-sub-mapper\""));
         assertTrue(realm.contains("\"revokeRefreshToken\": true"));
         assertTrue(realm.contains("\"refreshTokenMaxReuse\": 0"));
         assertTrue(realm.contains("\"optionalClientScopes\": [\"offline_access\"]"));