Method AddKeycloakAuthentication

Common/AuthExtensions.cs:9–35

(this IServiceCollection services)

public static class AuthExtensions
{
    public static IServiceCollection AddKeycloakAuthentication(this IServiceCollection services)
    {
        services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
            .AddKeycloakJwtBearer(
                serviceName: "keycloak",
                realm: "overflow",
                options =>
                {
                    options.RequireHttpsMetadata = false;
                    options.Audience = "overflow";
                    options.TokenValidationParameters = new TokenValidationParameters
                    {
                        ValidIssuers = [
                            "http://localhost:6001/realms/overflow",
                            "http://keycloak:8080/realms/overflow",
                            "http://id.overflow.local/realms/overflow",
                            "https://id.overflow.local/realms/overflow",
                            "https://overflow-id.trycatchlearn.com/realms/overflow",
                        ],
                        ClockSkew = TimeSpan.Zero,
                    };
                });

        services.AddAuthorizationBuilder();
        
        return services;
    }
}