如何在Micronaut中使用Keycloak JWT进行身份验证

implementation "io.micronaut.security:micronaut-security-jwt"
implementation "io.micronaut.security:micronaut-security-annotations"
implementation "io.micronaut.security:micronaut-security-oauth2"
implementation "io.micronaut.security:micronaut-security-session"
implementation "io.micronaut.security:micronaut-security-jwt-validation"

micronaut:
  security:
    enabled: true
    token:
      jwt:
        enabled: true
        signatures:
          jwks:
            - uri: https://<keycloak-server>/auth/realms/<realm>/protocol/openid-connect/certs

import io.micronaut.security.authentication.AuthenticationFailed;
import io.micronaut.security.authentication.AuthenticationProvider;
import io.micronaut.security.authentication.AuthenticationRequest;
import io.micronaut.security.authentication.AuthenticationResponse;
import io.micronaut.security.authentication.UserDetails;
import io.reactivex.Flowable;
import org.reactivestreams.Publisher;

import javax.inject.Singleton;

@Singleton
public class KeycloakAuthenticationProvider implements AuthenticationProvider {

    @Override
    public Publisher<AuthenticationResponse> authenticate(AuthenticationRequest authenticationRequest) {
        // 验证JWT的有效性
        // 使用Keycloak提供的API验证JWT
        // 如果验证成功，返回一个包含用户详细信息的AuthenticationResponse
        // 如果验证失败，返回一个AuthenticationFailed对象
    }
}

import io.micronaut.context.annotation.Requires;
import io.micronaut.security.authentication.AuthenticationProvider;
import io.micronaut.security.config.SecurityConfiguration;

import javax.inject.Singleton;

@Singleton
@Requires(property = SecurityConfiguration.PREFIX + ".enabled", value = "true", defaultValue = "true")
public class CustomSecurityConfiguration implements SecurityConfiguration {

    @Override
    public AuthenticationProvider getAuthenticationProvider() {
        return new KeycloakAuthenticationProvider();
    }
}

import io.micronaut.http.annotation.Controller;
import io.micronaut.http.annotation.Get;
import io.micronaut.security.annotation.Secured;

@Controller("/api")
@Secured("isAuthenticated()")
public class MyController {

    @Get("/protected")
    public String protectedEndpoint() {
        return "This is a protected endpoint";
    }
}