The domain-extension example is not working

In Keycloak >= 3.2.0, the admin role is no longer mapped in the scope of the admin-cli client by default. That leads to absence of the realm_access field in the access token, which, in turn, breaks domain-extension example.

There could be the following solutions:

• restore pre-3.2.0 behavior for the admin role and admin-cli scope;
• document the necessity to map the role manually in the readme for domain-extension;
• rewrite domain-extension's authorization code to use o.k.services.resources.admin.AdminAuth.