WorkClub Automation b813043195 fix(auth): add JWT audience claim and disable issuer validation ...

- Added Keycloak audience protocol mapper to workclub-app client
  - Maps 'workclub-api' to aud claim in access tokens
- Disabled issuer validation in API for local dev
  - External clients use localhost:8080, internal use keycloak:8080
  - Prevents validation mismatch in Docker network environment

This resolves 401 Unauthorized errors on all authenticated endpoints.

Ref: .sisyphus/evidence/final-f3-manual-qa.md lines 418-444

2026-03-05 14:12:53 +01:00

..

Auth

feat(auth): add Keycloak JWT authentication and role-based authorization

2026-03-03 14:27:30 +01:00

Endpoints

style(backend): apply dotnet format whitespace normalization

2026-03-05 11:07:19 +01:00

Middleware

style(backend): apply dotnet format whitespace normalization

2026-03-05 11:07:19 +01:00

Services

style(backend): apply dotnet format whitespace normalization

2026-03-05 11:07:19 +01:00

appsettings.Development.json

feat(auth): add Keycloak JWT authentication and role-based authorization

2026-03-03 14:27:30 +01:00

appsettings.json

chore(scaffold): initialize git repo and monorepo with .NET solution

2026-03-03 14:02:37 +01:00

Program.cs

fix(auth): add JWT audience claim and disable issuer validation

2026-03-05 14:12:53 +01:00

WorkClub.Api.csproj

fix(backend): update API package version to 10.0.3

2026-03-05 11:22:15 +01:00

WorkClub.Api.http

chore(scaffold): initialize git repo and monorepo with .NET solution

2026-03-03 14:02:37 +01:00