keycloak-uncached

diff --git a/docbook/reference/en/en-US/modules/identity-broker.xml b/docbook/reference/en/en-US/modules/identity-broker.xml
index 8d31ae4..16d25ee 100755
--- a/docbook/reference/en/en-US/modules/identity-broker.xml
+++ b/docbook/reference/en/en-US/modules/identity-broker.xml
@@ -289,7 +289,7 @@
                             <literal>Stored Tokens Readable</literal>
                         </entry>
                         <entry>
-                            Automatically assigns a <literal>broker.READ_TOKEN</literal> role that allows the user
+                            Automatically assigns a <literal>broker.read-token</literal> role that allows the user
                             to access any stored external tokens via the broker service.
                         </entry>
                     </row>
@@ -1151,7 +1151,7 @@ Authorization: Bearer {keycloak_access_token}]]></programlisting>
         </para>
         <para>
             By default, the Keycloak access token issued for the application can't be automatically used for retrieve thirdparty token.
-            A user will have to have the <literal>broker.READ_TOKEN</literal> role.  The client will also have to have that role
+            A user will have to have the <literal>broker.read-token</literal> role.  The client will also have to have that role
             in its scope.  In the broker configuration page you can automatically assign this role to newly imported users by
             turning on the <literal>Stored Tokens Readable</literal> switch.
         </para>

diff --git a/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-oidc.html b/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-oidc.html
index 9d23164..35833d0 100755
--- a/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-oidc.html
+++ b/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-oidc.html
@@ -53,7 +53,7 @@
                         <div class="col-sm-4">
                             <input ng-model="identityProvider.addReadTokenRoleOnCreate" id="storedTokensReadable" onoffswitch />
                         </div>
-                        <span tooltip-placement="right" tooltip="Enable/disable new users can read any stored tokens.  This assigns the broker.READ_TOKEN role." class="fa fa-info-circle"></span>
+                        <span tooltip-placement="right" tooltip="Enable/disable new users can read any stored tokens.  This assigns the broker.read-token role." class="fa fa-info-circle"></span>
                     </div>
                     <div class="form-group">
                         <label class="col-sm-2 control-label" for="updateProfileFirstLogin">Update Profile on First Login</label>

diff --git a/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-saml.html b/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-saml.html
index 05f4c63..a47d68b 100755
--- a/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-saml.html
+++ b/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-saml.html
@@ -53,7 +53,7 @@
                         <div class="col-sm-4">
                             <input ng-model="identityProvider.addReadTokenRoleOnCreate" id="storedTokensReadable" onoffswitch />
                         </div>
-                        <span tooltip-placement="right" tooltip="Enable/disable new users can read any stored tokens.  This assigns the broker.READ_TOKEN role." class="fa fa-info-circle"></span>
+                        <span tooltip-placement="right" tooltip="Enable/disable new users can read any stored tokens.  This assigns the broker.read-token role." class="fa fa-info-circle"></span>
                     </div>
                     <div class="form-group">
                         <label class="col-sm-2 control-label" for="updateProfileFirstLogin">Update Profile on First Login</label>

diff --git a/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-social.html b/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-social.html
index 3c9260a..28876da 100755
--- a/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-social.html
+++ b/forms/common-themes/src/main/resources/theme/base/admin/resources/partials/realm-identity-provider-social.html
@@ -57,7 +57,7 @@
                         <div class="col-sm-4">
                             <input ng-model="identityProvider.addReadTokenRoleOnCreate" id="storedTokensReadable" onoffswitch />
                         </div>
-                        <span tooltip-placement="right" tooltip="Enable/disable new users can read any stored tokens.  This assigns the broker.READ_TOKEN role." class="fa fa-info-circle"></span>
+                        <span tooltip-placement="right" tooltip="Enable/disable new users can read any stored tokens.  This assigns the broker.read-token role." class="fa fa-info-circle"></span>
                     </div>
                     <div class="form-group">
                         <label class="col-sm-2 control-label" for="enabled">Enabled</label>

diff --git a/model/api/src/main/java/org/keycloak/models/Constants.java b/model/api/src/main/java/org/keycloak/models/Constants.java
index 32fe6d5..eef214f 100755
--- a/model/api/src/main/java/org/keycloak/models/Constants.java
+++ b/model/api/src/main/java/org/keycloak/models/Constants.java
@@ -13,6 +13,6 @@ public interface Constants {
 
     String INSTALLED_APP_URN = "urn:ietf:wg:oauth:2.0:oob";
     String INSTALLED_APP_URL = "http://localhost";
-    String READ_TOKEN_ROLE = "READ_TOKEN";
+    String READ_TOKEN_ROLE = "read-token";
     String[] BROKER_SERVICE_ROLES = {READ_TOKEN_ROLE};
 }