fix security configuration

src/main/kotlin/com/auth/config/WebSecurityConfig.kt

@@ -21,22 +21,14 @@ class WebSecurityConfig () {
     @Bean
     @Throws(Exception::class)
     fun filterChain(http: HttpSecurity): SecurityFilterChain? {
-        http
+        http.authorizeHttpRequests(Customizer { auth ->
-            .authorizeHttpRequests(Customizer { auth ->
+                auth.anyRequest().authenticated() })
-                auth
-                    .anyRequest().authenticated()
-            }
-            )
             .oauth2ResourceServer(Customizer { oauth2 ->
-                oauth2!!
+                oauth2!!.jwt(Customizer.withDefaults())
-                    .jwt(Customizer.withDefaults())
+            }) // ← проверяем JWT токен
-            } // ← проверяем JWT токен
-            )
             .sessionManagement(Customizer { session: SessionManagementConfigurer<HttpSecurity?>? ->
-                session!!
+                session!!.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
-                    .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
+            }) // без сессий
-            } // без сессий
-            )
             .csrf(Customizer { csrf: CsrfConfigurer<HttpSecurity?>? -> csrf!!.disable() }) // отключаем CSRF для API
 
         return http.build()

src/main/resources/application.yaml

@@ -30,6 +30,9 @@ spring:
   # Keycloak Security
   security:
     oauth2:
+      resourceserver:
+        jwt:
+          issuer-uri: https://keycloak.dmitriy-churmeev.tech/realms/test_realm
       client:
         registration:
           keycloak: