Query on setting up the Keycloak for Authorization

[s-sivaramchander]

Hi Apicurio Team,

I'm currently working on integrating Apicurio Registry with Keycloak for authentication and authorization. I've followed the documentation, and while authentication seems to work fine when authorization is disabled, enabling authorization causes all requests to return 403 Forbidden.

I’m not entirely sure how the role-based access is expected to be interpreted by Apicurio. It’s unclear where the roles should be defined or how exactly the mapping is expected.

Here's the error I see in the backend when authorization is enabled:

Would appreciate any insights or clarification on how authorization is intended to be set up and how roles are expected to be passed and processed.

Thanks in advance!

Best,
Sivaramchander