fix security configuration

src/main/kotlin/com/test/TestApplication.kt

@@ -1,4 +1,4 @@
-package com.test.test
+package com.test
 
 import org.springframework.boot.autoconfigure.SpringBootApplication
 import org.springframework.boot.runApplication

src/main/kotlin/com/test/auth/config/WebSecurityConfig.kt

@@ -1,5 +1,6 @@
-package com.auth.config
+package com.test.auth.config
 
+import org.slf4j.LoggerFactory
 import org.springframework.context.annotation.Bean
 import org.springframework.context.annotation.Configuration
 import org.springframework.security.config.Customizer
@@ -12,13 +13,16 @@ import org.springframework.security.config.http.SessionCreationPolicy
 import org.springframework.security.core.authority.SimpleGrantedAuthority
 import org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
 import org.springframework.security.web.SecurityFilterChain
+import org.springframework.core.convert.converter.Converter
+import org.springframework.security.core.GrantedAuthority
+import org.springframework.security.oauth2.jwt.Jwt
 
 @Configuration
 @EnableWebSecurity
 @EnableMethodSecurity
 class WebSecurityConfig {
 
-    private val logger = org.slf4j.LoggerFactory.getLogger(WebSecurityConfig::class.java)
+    private val logger = LoggerFactory.getLogger(WebSecurityConfig::class.java)
 
     @Bean
     @Throws(Exception::class)
@@ -52,41 +56,41 @@ class WebSecurityConfig {
 
         val converter = JwtAuthenticationConverter()
 
-        converter.setJwtGrantedAuthoritiesConverter { jwt ->
-            logger.info("=== JWT Converter called for token ===")
+        // 🔑 КЛЮЧЕВОЕ ИЗМЕНЕНИЕ: используем явный объект вместо лямбды
+        converter.setJwtGrantedAuthoritiesConverter(
+            Converter<Jwt, Collection<GrantedAuthority>> { jwt ->
+                logger.info("=== JWT Converter called for token ===")
 
-            val roles = mutableSetOf<SimpleGrantedAuthority>()
+                val roles = mutableSetOf<SimpleGrantedAuthority>()
 
-            // Извлекаем роли из resource_access.test_client.roles
-            val resourceAccess = jwt.claims["resource_access"] as? Map<*, *>
-            logger.info("resource_access: $resourceAccess")
+                val resourceAccess = jwt.claims["resource_access"] as? Map<*, *>
+                logger.info("resource_access: $resourceAccess")
 
-            val clientAccess = resourceAccess?.get("test_client") as? Map<*, *>
-            val clientRoles = clientAccess?.get("roles") as? List<*>
+                val clientAccess = resourceAccess?.get("test_client") as? Map<*, *>
+                val clientRoles = clientAccess?.get("roles") as? List<*>
 
-            clientRoles?.forEach { role ->
-                logger.info("Adding ROLE_$role")
-                roles.add(SimpleGrantedAuthority("ROLE_$role"))
+                clientRoles?.forEach { role ->
+                    logger.info("Adding ROLE_$role")
+                    roles.add(SimpleGrantedAuthority("ROLE_$role"))
+                }
+
+                val realmAccess = jwt.claims["realm_access"] as? Map<*, *>
+                val realmRoles = realmAccess?.get("roles") as? List<*>
+
+                realmRoles?.forEach { role ->
+                    logger.info("Adding realm ROLE_$role")
+                    roles.add(SimpleGrantedAuthority("ROLE_$role"))
+                }
+
+                logger.info("Final authorities: ${roles.map { it.authority }}")
+                roles.toList()
             }
-
-            // Альтернативно: можно также читать из realm_access.roles
-            val realmAccess = jwt.claims["realm_access"] as? Map<*, *>
-            val realmRoles = realmAccess?.get("roles") as? List<*>
-
-            realmRoles?.forEach { role ->
-                logger.info("Adding realm ROLE_$role")
-                roles.add(SimpleGrantedAuthority("ROLE_$role"))
-            }
-
-            logger.info("Final authorities: ${roles.map { it.authority }}")
-            roles.toList()
-        }
+        )
 
         return converter
     }
 
 
-
 //    // Конвертер JWT Authentication (извлекает роли из токена)
 //    private fun jwtAuthenticationConverter(): JwtAuthenticationConverter {
 //        val converter = JwtAuthenticationConverter()

src/main/kotlin/com/test/rest/TestController.kt

@@ -1,6 +1,6 @@
-package com.test.test.rest
+package com.test.rest
 
-import com.auth.config.WebSecurityConfig
+import org.slf4j.LoggerFactory
 import org.springframework.security.access.prepost.PreAuthorize
 import org.springframework.security.core.Authentication
 import org.springframework.security.core.context.SecurityContextHolder
@@ -11,7 +11,7 @@ import org.springframework.web.bind.annotation.RestController
 @RestController
 open class TestController {
 
-    private val logger = org.slf4j.LoggerFactory.getLogger(TestController::class.java)
+    private val logger = LoggerFactory.getLogger(TestController::class.java)
 
 
     @PreAuthorize("hasRole('ADMIN')")