add multi-tenancy support to keycloak-authorization

[joggeli34]

Description

Add multi-tenancy support to keycloak-authorization so that it can be used together with the oidc-multi-tenancy.

Implementation ideas

Configuration could be similar to the oidc-configuration:

# for default tenant
quarkus.keycloak.policy-enforcer.enable=true

# for specific tenant
quarkus.keycloak."tenant".policy-enforcer.enable=true

[quarkus-bot]

/cc @pedroigor

[pedroigor]

If we could leverage the existing support from OIDC that would be awesome. But I think it would require some refactoring on keycloak-authorization config. Do you agree, @sberyozkin ?

I can only see a 1:1 mapping between OIDC and keycloak-authorization tenants.

[sberyozkin]

@pedroigor Hi Pedro, yeah, definitely, we can do it for the static tenants easily - by the time Keycloak Policy enforcer is called RoutingContext will already have a resolved tenant-id attribute. I reckon it would be reasonable to restrict it to the static tenants for now....