Keycloak as an Authorization Service

AN. IDP. IS. NEVER. THE. PEP!
We had this several time here in various threads. Last time not a week ago here: Role Policy configuration - #4 by dasniko