Really important default parameter in
keycloak
: « full scope allowed »
Here is how and why you should uncheck it
@please-open-it.bsky.socialIn Keycloak, you MUST take a look and uncheck "full scope allowed" checkbox if you use roles.
blog.please-open.it/full-scope-a...
