anchor.diff:  
   |===
   
  -Our example user has the first role, but not the second. *Add* the policy and *Publish* the service again. Our endpoint will now reflect the changed version.
  +Our example user has the first role, but not the second. *Add* the policy and *Publish* the API again. Our endpoint will now reflect the changed version.
   
   You will probably need to issue a new bearer token, which you can achieve by repeating the previous shell command.
   
  
positive.code: 
  |===
  
  Select *Add Policy*, and then *Publish* the service. You can see its endpoint information in the *Endpoint* tab, it should be similar to:
  
  https://localhost:8443/apiman-gateway/Newcastle/EchoAPI/1.0
  
  
negative.code: ---
  layout: post
  title:  "Keycloak and dagger: Securing your APIs with OAuth2"
  date:   2016-01-10 15:25:28 +0100
  author: marc_savy
  categories: gateway security oauth2 keycloak authentication authorization 1.2.x
  