Retrieve client roles from validated Keycloak claims and expose them through reusable auth helpers.
Implement:
normal user access to own resources
administrator access to all profiles
separate view and write authorization rules
clean 403 handling
Do not manually parse unvalidated JWTs throughout route code
Retrieve client roles from validated Keycloak claims and expose them through reusable auth helpers.
Implement:
normal user access to own resources
administrator access to all profiles
separate view and write authorization rules
clean 403 handling
Do not manually parse unvalidated JWTs throughout route code