diff --git a/src/module/auth/keycloak.strategy.ts b/src/module/auth/keycloak.strategy.ts index 2d7691b..045ecc3 100644 --- a/src/module/auth/keycloak.strategy.ts +++ b/src/module/auth/keycloak.strategy.ts @@ -31,7 +31,7 @@ export class KeycloakStrategy extends PassportStrategy(Strategy, "keycloak") { name: payload.name, // Google profile image is usually in 'picture' email_verified: payload.email_verified, - picture: payload.picture || `https://profiles.google.com/s2/photos/profile/${payload.email}`, + picture: payload.picture, roles: payload.realm_access?.roles || [], // Keep raw for debugging other custom claims raw: payload,