keycloak.json

{
  "realm": "photoz",
  "auth-server-url": "http://localhost:8080/auth",
  "ssl-required": "external",
  "resource": "photoz-restful-api",
  "bearer-only" : true,
  "credentials": {
    "secret": "secret"
  },
  "policy-enforcer": {
    "user-managed-access" : {},
    "paths": [
      {
        "path" : "/album/*",
        "methods" : [
          {
            "method": "POST",
            "scopes" : ["urn:photoz.com:scopes:album:create"]
          },
          {
            "method": "GET",
            "scopes" : ["urn:photoz.com:scopes:album:view"]
          }
        ]
      },
      {
        "name" : "Album Resource",
        "path" : "/album/{id}",
        "methods" : [
          {
            "method": "DELETE",
            "scopes" : ["urn:photoz.com:scopes:album:delete"]
          },
          {
            "method": "GET",
            "scopes" : ["urn:photoz.com:scopes:album:view"]
          }
        ]
      },
      {
        "path" : "/profile"
      },
      {
        "name" : "Admin Resources",
        "path" : "/admin/*"
      }
    ]
  }
}