Validation: Keycloak token fix (#26)

validation-26-2026-03-31 Doc

validation pass

Project

Verdict: PASS

What Was Validated

westside-ai-assistant #26 — Keycloak token validation failing, basketball-api returns 401

Root Cause

KEYCLOAK_REALM_URL env var pointed to internal URL (http://keycloak.keycloak.svc.cluster.local/realms/westside-basketball). Tokens issued with internal issuer were rejected by basketball-api which validates against the external issuer.

Fix

Changed env var to https://keycloak.tail5b443a.ts.net/realms/westside-basketball via kubectl set env.

Checks

Check	Result
Token acquisition	PASS — Keycloak 200 OK
basketball-api auth	PASS — 200 OK (was 401)
End-to-end GroupMe flow	PASS — data returned correctly