perara
diff --git a/‎bin/deploy-rabbit‎
Lines changed: 1 addition & 1 deletion b/‎bin/deploy-rabbit‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎conf/keycloak/h2/keycloakdb.lock.db‎
Lines changed: 0 additions & 6 deletions b/‎conf/keycloak/h2/keycloakdb.lock.db‎
Lines changed: 0 additions & 6 deletions
diff --git a/‎conf/keycloak/h2/keycloakdb.mv.db‎
0 Bytes b/‎conf/keycloak/h2/keycloakdb.mv.db‎
0 Bytes
diff --git a/‎conf/keycloak/rabbitmq.config‎
Lines changed: 4 additions & 14 deletions b/‎conf/keycloak/rabbitmq.config‎
Lines changed: 4 additions & 14 deletions
diff --git a/‎use-cases/keycloak.md‎
Lines changed: 3 additions & 3 deletions b/‎use-cases/keycloak.md‎
Lines changed: 3 additions & 3 deletions
@@ -5,7 +5,7 @@ SCRIPT="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 
 MODE=${MODE:-uaa}
 CONFIG=${CONFIG:-rabbitmq.config}
-IMAGE_TAG=${IMAGE_TAG:-3.11.7}
+IMAGE_TAG=${IMAGE_TAG:-3.11.9}
 IMAGE=${IMAGE:-rabbitmq}
 
 function generate-ca-server-client-kpi {
 
@@ -9,20 +9,10 @@
   ]},
   {rabbitmq_auth_backend_oauth2, [
     {resource_server_id, <<"rabbitmq">>},
+    {extra_scopes_source, <<"extra_scope">>},
+    {preferred_username_claims, [<<"user_name">>]},
     {key_config, [
-      {default_key, <<"Gnl2ZlbRh3rAr6Wymc988_5cY7T5GuePd5dpJlXDJUk">>},
-      {signing_keys,
-        #{<<"Gnl2ZlbRh3rAr6Wymc988_5cY7T5GuePd5dpJlXDJUk">> => {pem, <<"-----BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dP+vRn+Kj+S/oGd49kq
-6+CKNAduCC1raLfTH7B3qjmZYm45yDl+XmgK9CNmHXkho9qvmhdksdzDVsdeDlhK
-IdcIWadhqDzdtn1hj/22iUwrhH0bd475hlKcsiZ+oy/sdgGgAzvmmTQmdMqEXqV2
-B9q9KFBmo4Ahh/6+d4wM1rH9kxl0RvMAKLe+daoIHIjok8hCO4cKQQEw/ErBe4SF
-2cr3wQwCfF1qVu4eAVNVfxfy/uEvG3Q7x005P3TcK+QcYgJxav3lictSi5dyWLgG
-QAvkknWitpRK8KVLypEj5WKej6CF8nq30utn15FQg0JkHoqzwiCqqeen8GIPteI7
-VwIDAQAB
------END PUBLIC KEY-----">>}
-         }
-      }]
-    }
+      {jwks_url, <<"http://keycloak:8080/realms/test/protocol/openid-connect/certs">>}
+    ]}
   ]}
 ].
@@ -41,7 +41,7 @@ make start-rabbitmq
 
 Go to http://localhost:15672/#/, click on `Click here to log in` button, and enter the credentials
 `rabbit_admin` as username and `rabbit_admin` as password. This is the single user created in keycloak with the
-appropriate scopes to access the management ui. 
+appropriate scopes to access the management ui.
 
 ## Access Management api
 
@@ -108,8 +108,8 @@ rather than `legacy-token-key`.
 ### Configure Client
 
 For backend applications which uses **Client Credentials flow** you create a **Client** with:
-- **Access Type** : `confidential`
-- With all the other flows disabled: Standard Flow, Implicit Flow, Direct Access Grants
+- **Access Type** : `public`
+- **Authentication flow** : `Standard Flow`
 - With **Service Accounts Enabled** on. If it is not enabled you do not have the tab `Credentials`
 - In tab `Credentials` you have the client id secret