Spring Boot service that bridges RFID-based identification to Keycloak token exchange and role extraction. It allows clients to authenticate either via an RFID attribute stored on a Keycloak user or via username/password, and to decode roles from a JWT.