Spring Boot Keycloak OpenID Connect config

application.yml

spring:
  security:
    oauth2:
      client:
        registration:
          keycloak:
            client-id: xyz-app
            client-secret: <insert-secret-here>
            clientName: XYZ
            authorization-grant-type: authorization_code
            redirectUriTemplate: '{baseUrl}/login/oauth2/code/{registrationId}'
            scope:
              - openid
              - profile
              - email
        provider:
          keycloak:
            #issuer-uri: http://localhost:8080/auth/realms/xyz
            authorization-uri: http://localhost:8080/auth/realms/xyz/protocol/openid-connect/auth
            token-uri: http://localhost:8080/auth/realms/xyz/protocol/openid-connect/token
            user-info-uri: http://localhost:8080/auth/realms/xyz/protocol/openid-connect/userinfo
            jwk-set-uri: http://localhost:8080/auth/realms/xyz/protocol/openid-connect/certs
            user-name-attribute: preferred_username
logging:
   file: spring-oidc.log
   level:
      root: INFO
server:
   port: 8080