40,059 Keycloak Servers: Where the Identity Provider Is the Asset
40,059 Keycloak Servers: Where the Identity Provider Is the Asset An identity provider is the component that decides who a user is for every applica…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
A provisioned Keycloak client inherits no PKCE pin, and the obvious fix is inert
Keycloak 26.7.1, in a realm where every hand-authored client carries "pkce.code.challenge.method": "S256" and refuses plain . Enable the OAuth Clien…
Mastering Keycloak: Essential Concepts Every Developer Should Know for Application Security
Managing authentication and authorization in modern web applications can quickly become a maintenance nightmare. Between handling password resets, m…
OIDC: Keycloak setup for ALB Gateway API
Introduction In my previous article , I tested using ALB CRDs to offload JWT validation for OIDC-based authentication to the Amazon EKS Kubernetes A…
Keycloak lets you pick a login option that's guaranteed to fail — here's the fix
Project : keycloak/keycloak — the identity and access management server. PR: #51021 , fixing #46481 . The bug : if you write a custom Keycloak Authe…
Testing Keycloak SPIs with Testcontainers — the part every tutorial skips
Most "here's how to write a custom Keycloak authenticator" posts end at mvn package . You get a class that implements Authenticator , a factory, a M…
Your Keycloak roles aren't working in Spring Security. Here's the actual reason.
If you've wired up a Spring Boot resource server behind Keycloak and your @PreAuthorize("hasRole('ADMIN')") is silently returning 403 for a user you…