Is there a way to enforce authorization check in this plugin?

[Okanmercan99]

Hi,

I have configured a Keycloak client named nexxus-backend as a confidential client and set up some permissions on specific endpoints. These permissions check whether the user belongs to a specific group, and if not, the user should not be able to access the defined resources (endpoints). However, it appears that the plugin is not enforcing these permissions on the specified endpoints.

Is there a way to ensure that these permissions are enforced? Below are my Keycloak settings. Thank you for your assistance!

const opt: KeycloakOptions = {
    appOrigin: 'http://localhost:3000',
    keycloakSubdomain: 'localhost:8080/realms/master',
    clientId: 'nexxus-backend',
    clientSecret: '5A5mx19rMDW5d1TrC7nei2TDCmPoAVT5',
    unauthorizedHandler: (req, resp) => {
      console.log('hello world!')
      resp.status(401).send('Invalid request')
    }
  }

  //Add keycloak settings to the Fastify instance
  await fastify.register(keycloak, opt);

Addition:

Here my resource defined in Keycloak:

policy:

and permission: