Add logs

src/auth/keycloak.strategy.ts

@@ -50,6 +50,35 @@ export class KeycloakJwtStrategy extends PassportStrategy(Strategy, 'jwt') {
   }
 
   validate(payload: JwtPayload): JwtPayload {
+    console.log('JWT Payload received:', JSON.stringify(payload, null, 2));
+
+    // Log important JWT claims
+    console.log('JWT Subject (sub):', payload.sub);
+    console.log('JWT Issuer (iss):', payload.iss);
+    console.log('JWT Audience (aud):', payload.aud);
+    console.log(
+      'JWT Expiration (exp):',
+      new Date(payload.exp * 1000).toISOString(),
+    );
+    console.log(
+      'JWT Issued At (iat):',
+      new Date(payload.iat * 1000).toISOString(),
+    );
+
+    // Log user info
+    console.log('User email:', payload.email);
+    console.log('Username:', payload.preferred_username);
+
+    // Log roles
+    console.log('Realm access roles:', payload.realm_access?.roles || []);
+
+    if (payload.resource_access) {
+      console.log('Resource access:');
+      Object.entries(payload.resource_access).forEach(([resource, data]) => {
+        console.log(`  ${resource}:`, data.roles || []);
+      });
+    }
+
     if (payload.exp < Date.now() / 1000) {
       throw new UnauthorizedException('Token expirado');
     }