PKM Keycloak

PKM ERP 시스템 인증 서버 (Keycloak 26.2.5)

실행

docker compose up -d

• Keycloak: http://localhost:8080
• Admin Console: http://localhost:8080/admin (admin / admin)

Realm 정보

항목	값
Realm	pkm-erp
Client ID	pkm-backend
Client Secret	pkm-backend-secret

Roles

Role	설명
ADMIN	시스템 관리자
HQ_MANAGER	본사 매니저
HQ_STAFF	본사 직원
BRANCH_MANAGER	지점 매니저
BRANCH_STAFF	지점 직원

userbackend 연동 설정

application.yml:

spring:
  security:
    oauth2:
      resourceserver:
        jwt:
          issuer-uri: http://localhost:8080/realms/pkm-erp

주요 API 엔드포인트

용도	URL
JWKS (JWT 검증)	http://localhost:8080/realms/pkm-erp/protocol/openid-connect/certs
토큰 발급 (로그인)	http://localhost:8080/realms/pkm-erp/protocol/openid-connect/token
토큰 갱신	http://localhost:8080/realms/pkm-erp/protocol/openid-connect/token
로그아웃	http://localhost:8080/realms/pkm-erp/protocol/openid-connect/logout
Admin REST API	http://localhost:8080/admin/realms/pkm-erp/users