refactor: update keycloak_client to use upstream version

- Replace keycloak_client.rs with upstream/main version
- Update SingleSignOnProvider trait to use async fn in trait
- Change config() from method to standalone function
- Update test mocks to return Result directly instead of boxed futures

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: JanZachmann

src/common.rs

@@ -98,7 +98,7 @@ pub fn create_frontend_config_file() -> Result<()> {
         .context("failed to create frontend config file")?;
 
     config_file
-        .write_all(keycloak_client::KeycloakProvider::config().as_bytes())
+        .write_all(keycloak_client::config().as_bytes())
         .context("failed to write frontend config file")
 }
 

src/keycloak_client.rs

@@ -3,9 +3,7 @@ use base64::{Engine, prelude::BASE64_STANDARD};
 use jwt_simple::prelude::{RS256PublicKey, RSAPublicKeyLike};
 #[cfg(feature = "mock")]
 use mockall::automock;
-use reqwest::Client;
 use serde::{Deserialize, Serialize};
-use trait_variant::make;
 
 #[derive(Debug, Deserialize, Serialize, Clone)]
 pub struct TokenClaims {
@@ -27,24 +25,29 @@ macro_rules! keycloak_url {
     }};
 }
 
-#[make(Send + Sync)]
 #[cfg_attr(feature = "mock", automock)]
-pub trait SingleSignOnProvider {
+#[allow(async_fn_in_trait)]
+pub trait SingleSignOnProvider: Send + Sync {
     async fn verify_token(&self, token: &str) -> anyhow::Result<TokenClaims>;
 }
 
-#[derive(Clone, Default)]
-pub struct KeycloakProvider;
+#[derive(Clone)]
+pub struct KeycloakProvider {
+    client: reqwest::Client,
+}
 
-impl KeycloakProvider {
-    pub fn config() -> String {
-        let keycloak_url = &keycloak_url!();
-        format!("window.__APP_CONFIG__ = {{KEYCLOAK_URL:\"{keycloak_url}\"}};")
+impl Default for KeycloakProvider {
+    fn default() -> Self {
+        Self {
+            client: reqwest::Client::new(),
+        }
     }
+}
 
+impl KeycloakProvider {
     async fn realm_public_key(&self) -> Result<RS256PublicKey> {
-        let client = Client::new();
-        let resp = client
+        let resp = self
+            .client
             .get(keycloak_url!())
             .send()
             .await
@@ -68,3 +71,8 @@ impl SingleSignOnProvider for KeycloakProvider {
         Ok(claims.custom)
     }
 }
+
+pub fn config() -> String {
+    let keycloak_url = &keycloak_url!();
+    format!("window.__APP_CONFIG__ = {{KEYCLOAK_URL:\"{keycloak_url}\"}};")
+}

tests/validate_portal_token.rs

@@ -44,10 +44,7 @@ fn make_api(
     let mut single_sign_on_provider_mock = SingleSignOnProvider::default();
     single_sign_on_provider_mock
         .expect_verify_token()
-        .returning(move |_| {
-            let claims = claims.clone();
-            Box::pin(async move { Ok(claims) })
-        });
+        .returning(move |_| Ok(claims.clone()));
 
     Api {
         service_client: device_service_client_mock,