title: Keycloak java servlet adapter get roles and scopes
body: <p>I'm currently implementing a webb app with JEE7 on a glassfish 4. With that I'm using Keycloak as a security provider which lead me to use the KeycloakOIDCFilter java servlet filter to get the combo working. </p>
  
  <p>For now the login and logout is no problem, but I need the scopes and roles too.
  Therefor, my question is:</p>
  
  <p>Ho do I obtain these? I've seen the examples with the security and authorization context but I can not access them, as the servlet filter only sets the keycloak deployment context as servlet context attribute not the security or authentication context.</p>
  
  <p>I already tried understanding what happens in the wildfly / jboss implementations, but that lead me nowhere. </p>