Unattended Jolokia Queries Not Working When Keycloak is Integrated for Access Control

1. Set up a broker to use keycloak / Red Hat SSO for authentication, similar to the example at https://github.com/rh-messaging/activemq-artemis/tree/7.11.0.CR2/examples/features/standard/security-keycloak 2. Enable direct grants for the artemis-console client in keycloak / SSO 3. Obtain a bearer token from keycloak using curl, like so: export TOKEN=$(curl -X POST 'http://localhost:8080/auth/realms/amq/protocol/openid-connect/token' -H "Content-Type: application/x-www-form-urlencoded" -d 'username=testadmin' -d 'password=testadmin' -d 'grant_type=password' -d 'client_id=artemis-console' | jq -r '.access_token') (note: tried with and without client_secret) 4. Now try to use the token in a jolokia query, like so: curl -H "Origin:http://localhost:8161" -H "Authorization: Bearer ${TOKEN}" -v http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=\"localhost\",component=addresses,address=\"DLQ\",subcomponent=queues,routing-type=\"anycast\",queue=\"DLQ\"/countMessages\(\) The result is a 403 error.