{
  "principal-attribute": "sub",
  "enable-cors": true,

  "realm": "${env.moqui_keycloak_realm}",
  "disable-trust-manager": true,
  "auth-server-url": "${env.moqui_keycloak_server_url}",
  "ssl-required": "external",
  "resource": "${env.moqui_keycloak_client_id}",
  "confidential-port": 0,
  "use-resource-role-mappings": true,
  "autodetect-bearer-only": false,
  "bearer-only": false,
  "verify-token-audience": true,
  "credentials": {
    "secret": "${env.moqui_keycloak_client_secret}"
  }
}