Claim field `resource_access` missing

[tophattom]

I'm using Keycloak as the OpenID server and the default roles mapper by default puts user's client roles in path in resource_access.${client_id}.roles token. This field is not present in the $user_claim passed to the openid-connect-generic-update-user-using-current-claim action. However, when I change the path to asd.${client_id}.roles, for example, they will show up in the $user_claim

[ridwankustanto]

@tophattom Hi, did you solve it? I need to mapping role keycloak to wordpress too.

[tophattom]

This issue is not strictly related to mapping Keycloak roles to Wordpress roles. You can work around the issue here by creating a new mapper on the Keycloak client that puts the client roles in a different claim on the token (wp_roles in my case). You can then use that new claim in, for example, the openid-connect-generic-user-create and openid-connect-generic-update-user-using-current-claim to map those roles to Wordpress roles.