(camel-quarkus) branch camel-main updated: Add audience mapper to the oauth test realm client

[jiriondrusek]

This is an automated email from the ASF dual-hosted git repository.

JiriOndrusek pushed a commit to branch camel-main
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git


The following commit(s) were added to refs/heads/camel-main by this push:
     new aecfa2ce1a Add audience mapper to the oauth test realm client
aecfa2ce1a is described below

commit aecfa2ce1a16d7958cb1798d7fade49a9463c540
Author: jiriOndrusek-agent <ondrusek.jiri+ag...@gmail.com>
AuthorDate: Fri Oct 30 12:23:27 2026 +0000

    Add audience mapper to the oauth test realm client
    
    camel-oauth now validates the access token audience against the
    client id (CAMEL-26404), so the Keycloak client must put camel-client
    into the aud claim of its access tokens.
    
    Co-Authored-By: Claude Opus 5.5 <nore...@anthropic.com>
---
 .../oauth/src/test/resources/camel-realm.json             | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/integration-tests/oauth/src/test/resources/camel-realm.json 
b/integration-tests/oauth/src/test/resources/camel-realm.json
index 1e2ff6d9be..73047bf6b5 100644
--- a/integration-tests/oauth/src/test/resources/camel-realm.json
+++ b/integration-tests/oauth/src/test/resources/camel-realm.json
@@ -78,7 +78,20 @@
       ],
       "attributes": {
         "post.logout.redirect.uris": 
"http://127.0.0.1:8080/##https://example.local/##https://example.k3s/";
-      }
+      },
+      "protocolMappers": [
+        {
+          "name": "camel-client-audience",
+          "protocol": "openid-connect",
+          "protocolMapper": "oidc-audience-mapper",
+          "consentRequired": false,
+          "config": {
+            "included.client.audience": "camel-client",
+            "id.token.claim": "false",
+            "access.token.claim": "true"
+          }
+        }
+      ]
     }
   ]
 }