#Keycloak

Kubernetes end-to-end testing with Kyverno Chainsaw on kind in GitHub Actions: six Kapitan recipes, a fail-fast pod watcher, webhook races, measured timeouts.

Choosing between self-hosted and managed Keycloak affects more than where your identity service runs....

Introduction Keycloak ships with a built-in mechanism for restricting user registration by...

Here's a situation I've been in more times than I'd like to admit. You set up Keycloak. It works...

Every developer has built it at least once. A UsersController, a POST /auth/login endpoint, a...

Eliminating password databases: OpenID Connect, front-channel vs. back-channel, role mapping, and the...

I got tired of watching our login endpoint get hammered by bots. Credential stuffing, brute force,...

Keycloak 24’s default configuration chokes on 2k concurrent users—but with PostgreSQL 17 and Redis...

From Dev.to - rust: Your auth server shouldn't cost more RAM than your entire app. So I wrote my own in Rust.

Every new product I've shipped starts the same way: "We just need login, right?" Two weeks later we're knee-deep in password resets, refresh tokens, org invites, and role checks sprinkled across five services.…