keycloak.json

{
    "realm": "demo",
    "resource": "custom-cxf-endpoint",
    "bearer-only": "true",
    "auth-server-url": "http://localhost:8080/auth",
    "ssl-required" : "external"
}