KeyCloak directs to 403 forbidden page after authenticated about spring-boot-keycloak-tutorial HOT 5 CLOSED

Issue resolved, the problem with the user role and user

from spring-boot-keycloak-tutorial.

@chamithchathuka
I am also getting same issue. What changes you did in user role and user. In my case I have created user at realm level and created user role at realm level. Later I did role mapping for user and assigned him user role. When I am trying to access endpoint, I am getting keycloak pop for login. After correct login credential, I am getting 403 error. I have used same example as yours.

from spring-boot-keycloak-tutorial.

@vivek82 in order to login to http://[host]:[port]/auth/admin/[your-realm]/console you may need some additional roles eg. view-realm
https://lists.jboss.org/pipermail/keycloak-user/2018-December/016806.html

from spring-boot-keycloak-tutorial.

@chamithchathuka, could you please elaborate the steps / instructions to add the view-realm role.
Actually, I tried to add this role but still I get the same issue when I run my application.
Also, when I try to click the Base URL - http://[host]:[port]/auth/admin/[your-realm]/console under MyRealm >> Clients, I redirected to a forbidden page in Keycloak console itself.
I am kind of stuck at this point, any help is much appreciated.
Thanks in advance.

from spring-boot-keycloak-tutorial.

User's roles should be added to the access token(generated by keycloak after successful authentication) as well.
You can map the required roles to be added to the access token using client scope tab.

from spring-boot-keycloak-tutorial.