From fc7f9964e5229d3e0fa67dca5b50595630c60ce8 Mon Sep 17 00:00:00 2001
From: "dmitriy.churmeev" <dmitriy.churmeev@gmail.com>
Date: Sun, 29 Mar 2026 13:43:14 +0300
Subject: [PATCH] fix security configuration

---
 .../kotlin/com/auth/config/WebSecurityConfig.kt    | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
index 5a4235e..b90fd24 100644
--- a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
+++ b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
@@ -43,12 +43,22 @@ class WebSecurityConfig () {
     private fun jwtAuthenticationConverter(): JwtAuthenticationConverter {
         val converter = JwtAuthenticationConverter()
 
-        // Извлекаем роли из поля realm_access.roles
+        // Извлекаем роли из поля resource_access.test_client.roles
         val authoritiesExtractor = JwtGrantedAuthoritiesConverter()
-        authoritiesExtractor.setAuthoritiesClaimName("realm_access.roles")  // где лежат роли
+        authoritiesExtractor.setAuthoritiesClaimName("resource_access.test_client.roles")  // где лежат роли
         authoritiesExtractor.setAuthorityPrefix("ROLE_")  // добавляем префикс ROLE_
 
         converter.setJwtGrantedAuthoritiesConverter(authoritiesExtractor)
+
+//        // Дополнительно: проверяем, что роли не пустые
+//        converter.setJwtGrantedAuthoritiesConverter { jwt ->
+//            val authorities = authoritiesExtractor.convert(jwt)
+//            if (authorities.isEmpty()) {
+//                throw IllegalArgumentException("User has no roles assigned in token")
+//            }
+//            authorities
+//        }
+
         return converter
     }