This is an automated email from the ASF dual-hosted git repository. JiriOndrusek pushed a commit to branch camel-main in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git
commit 6e03316c1502dfe508e117a9ffad3836d0e64c93 Author: jiriOndrusek-agent <[email protected]> AuthorDate: Fri Oct 30 12:23:27 2026 +0000 Add audience mapper to the oauth test realm client camel-oauth now validates the access token audience against the client id (CAMEL-26404), so the Keycloak client must put camel-client into the aud claim of its access tokens. Co-Authored-By: Claude Opus 5.5 <[email protected]> --- .../oauth/src/test/resources/camel-realm.json | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/integration-tests/oauth/src/test/resources/camel-realm.json b/integration-tests/oauth/src/test/resources/camel-realm.json index 1e2ff6d9be3..73047bf6b5e 100644 --- a/integration-tests/oauth/src/test/resources/camel-realm.json +++ b/integration-tests/oauth/src/test/resources/camel-realm.json @@ -78,7 +78,20 @@ ], "attributes": { "post.logout.redirect.uris": "http://127.0.0.1:8080/##https://example.local/##https://example.k3s/"; - } + }, + "protocolMappers": [ + { + "name": "camel-client-audience", + "protocol": "openid-connect", + "protocolMapper": "oidc-audience-mapper", + "consentRequired": false, + "config": { + "included.client.audience": "camel-client", + "id.token.claim": "false", + "access.token.claim": "true" + } + } + ] } ] }
