我试图在我的Spring Boot 后端为我的认证系统使用 Spring 安全和keycloak。keycloak部分正在做它的工作，我有一个keycloak服务器运行在localhost：8180，我可以在那里创建角色等。当后端用户没有连接时，keycloak webview弹出，让我连接或注册一个新用户。当显示OAuth2 AuthenticationToken的inide时，我得到了所有正确的信息，包括用户的角色（屏幕截图1）。
问题是，当使用@preAuthorize（）（AppController.kt）保护路由时，hasRole函数会触发hasAnyRole和hasAnyAuthorityName（屏幕截图2）。但是当查看roleSet时，调用（getAuthoritySet（））我没有看到PREFIX_client_test。当在jwtAuthenticationCOnverter（）中放置断点时，我发现它只在应用程序启动时触发，而不是在访问受保护的路由时触发。我不知道你是否有任何线索，我会提供给你的代码和截图下，谢谢你的回答。
OAuth2 AuthenticationToken Result of OAuth2AuthenticationToken的结果
hasAnyAuthorityName中的断点Breakpoint in hasAnyAuthorityName

AppController.kt

package com.linkedout.backend.controller

import org.springframework.security.access.prepost.PreAuthorize
import org.springframework.security.oauth2.client.authentication.OAuth2AuthenticationToken
import org.springframework.web.bind.annotation.GetMapping
import org.springframework.web.bind.annotation.RequestMapping
import org.springframework.web.bind.annotation.RestController

@RestController
@RequestMapping("/")
open class AppController {
    @GetMapping
    open fun hello(token: OAuth2AuthenticationToken): String {
        return "Token: ${token}"
    }

    @GetMapping("candidate")
    @PreAuthorize("hasRole('client_candidate')")
    open fun helloProtected(): String {
        return "Hello premium user"
    }

    @GetMapping("test")
    @PreAuthorize("hasRole('client_test')")
    open fun test(): String {
        return "This is a test"
    }

    @GetMapping("admin")
    @PreAuthorize("hasRole('client_admin')")
    open fun helloProtectedAdmin(): String {
        return "Hello admin user"
    }
}

SecurityConfig.kt

package com.linkedout.backend.config

import com.linkedout.backend.KeycloakLogoutHandler
import lombok.RequiredArgsConstructor
import org.springframework.context.annotation.Bean
import org.springframework.context.annotation.Configuration
import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity
import org.springframework.security.config.annotation.web.builders.HttpSecurity
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity
import org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
import org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
import org.springframework.security.web.SecurityFilterChain

@Configuration
@EnableWebSecurity
@EnableMethodSecurity(prePostEnabled = true)
@RequiredArgsConstructor
internal open class SecurityConfig() {

    @Bean
    @Throws(Exception::class)
    open fun filterChain(http: HttpSecurity): SecurityFilterChain {
        http.csrf { csrf -> csrf.disable() }
                .authorizeHttpRequests { auth -> auth.anyRequest().fullyAuthenticated() }
                .oauth2Login {  }
                .oauth2ResourceServer { oauth2 -> oauth2.jwt { jwtConfigurer -> jwtConfigurer.jwtAuthenticationConverter(jwtAuthenticationConverter()) } }

        return http.build()
    }


    open fun jwtAuthenticationConverter(): JwtAuthenticationConverter {
        val jwtGrantedAuthoritiesConverter = JwtGrantedAuthoritiesConverter()
        jwtGrantedAuthoritiesConverter.setAuthoritiesClaimName("roles")
        jwtGrantedAuthoritiesConverter.setAuthorityPrefix("ROLE_")

        val jwtAuthenticationConverter = JwtAuthenticationConverter()
        jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter(jwtGrantedAuthoritiesConverter)
        return jwtAuthenticationConverter
    }
}

application.yml

spring:
  security:
    oauth2:
      resourceserver:
        jwt:
          issuer-uri: http://localhost:8180/realms/Linkedout
          jwk-set-uri: http://localhost:8180/realms/Linkedout/protocol/openid-connect/certs
      client:
        registration:
          keycloak:
            client-id: backend
            client-secret: PjkVtHOWmu7BEekOqJnY8TopHrJO0iCE
            authorization-grant-type: authorization_code
            scope: openid
        provider:
          keycloak:
            issuer-uri: http://localhost:8180/realms/LinkedOut
            user-name-attribute: preferred_username

server:
  port: 9090