quarkus-keycloak-authorization extension allow access to a protected resource

[pjgg]

Describe the bug

Quarkus Version: 2.0.0.Alpha1, 2.0.0.Alpha2
Extension: quarkus-keycloak-authorization
Reproducer: over this project you can run the following command: mvn -B -V clean verify -fae -Dversion.quarkus=2.0.0.Alpha2 -pl app-metadata/deployment,app-metadata/runtime,common,security/keycloak-authz -Dts.authenticated-registry

Test: SecurityKeycloakAuthzOpenShiftTest:noUser_userResource

Keycloak properties: https://github.com/pjgg/quarkus-openshift-test-suite/blob/feat/upgrade_2x/security/keycloak-authz/src/test/resources/keycloak-realm.json

Test output:

[ERROR]   SecurityKeycloakAuthzOpenShiftTest>AbstractSecurityKeycloakAuthzOpenShiftTest.noUser_adminResource:112 1 expectation failed.
Expected status code <401> but was <200>.

[ERROR]   SecurityKeycloakAuthzOpenShiftTest>AbstractSecurityKeycloakAuthzOpenShiftTest.noUser_userResource:103 1 expectation failed.
Expected status code <401> but was <200>.

Explanation:

Resource /users is protected by Keycloak auth configuration and a query without credentials should return a 401 as Quarkus 1.13.2.Final

Note: work as expected over Quarkus 1.13.2.Final and lower versions.

[quarkus-bot]

/cc @geoand

[geoand]

cc @sberyozkin

[Sgitario]

This issue is duplicated by #17164
cc @sberyozkin