Keycloak nodejs adapter denies access even for empty roles

Getting advice
1

I’m trying to secure my Node.js app with keycloak-connect, but after successful login Keycloak responds with 403 Access denied. Specified list of roles is empty:

app.all(
    '/',
    keycloak.protect(),
    (req,res) => res.send('Secured Express + TypeScript Server'),
)

Keycloak configured in most basic way: just realm, client and user added:

  • Master → Add realm → Name: kingdom
  • Clients → Create → Client ID: nodejs
  • Clients → nodejs → Settings:
    • Access Type: confidential
    • Valid Redirect URIs: *

I’ve build minimal complete project which can be run with single ./run.sh command.

Could you please give me a hint on what Keycloak configuration I’m missing? Thanks in advance.

2

It was docker<->keycloak-connect misunderstanding issue: keycloak-connect talks to Keycloak directly (without issuing redirects) and when it fails (it does because Keycloak container isn’t accessible from Node.js container through localhost) it issues Access denied response.

I specified network_mode: host docker setting for Node.js container so that keycloak-connect now can access Keycloak internally.