reinforced authorize for reducing expiration risks

templates/group_created.json.j2

@@ -477,6 +477,23 @@
 			"scriptExpression": "return Java.to(Java.from($.otherpolicies).concat($.memberpolicy), 'java.lang.String[]')"
 		  }
 	},
+	{
+		"name" : "pyrest",
+		"taskReferenceName" : "authorize",
+		"type" : "SIMPLE",
+		"inputParameters" : {
+			"url" : "{{ keycloak }}/master/protocol/openid-connect/token",
+			"method" : "POST",
+			"headers" : {
+				"Accept" : "application/json"
+			},
+			"body" : {
+				"client_id" : "orchestrator", 
+				"client_secret" : "{{ keycloak_auth_master }}",
+				"grant_type" : "client_credentials"
+			}
+		}
+	},
 	{
 		"name" : "pyrest",
 		"taskReferenceName" : "finalize_permission",
@@ -493,7 +510,7 @@
 			},
 	  		"method" : "PUT",
 			"headers" : {
-			  "Authorization" : "Bearer ${authorize.output.body.access_token}",
+			  "Authorization" : "Bearer ${authorize2.output.body.access_token}",
 			  "Content-Type" : "application/json"
 			}
   		}