Articles by Guilliano Molaire
Why Keycloak Logins Get Slow With Lots of Groups (and How to Fix It)
Fix slow Keycloak logins caused by many groups or roles: how group and role resolution works, why it scales poorly,…
12 min readKeycloak Database Connection Pool Exhaustion: Causes and Fixes
Fix Keycloak database connection pool exhaustion: size the Quarkus datasource pool, handle DB restarts and leaks, and spot connections growing…
12 min readSkycloak vs the Community Keycloak Terraform Provider (and How to Use Both)
The difference between the Skycloak and community keycloak/keycloak Terraform providers, when to use each, and how to run both in…
7 min readRevoke One Keycloak Session Without Logging the User Out Everywhere
Revoke a single Keycloak session or refresh token without ending all of a user's sessions: the logout endpoint, admin session…
9 min readFixing Keycloak's 431 'Request Header Fields Too Large'
Fix Keycloak HTTP 431 'Request Header Fields Too Large' errors: raise Quarkus header limits and shrink bloated tokens by trimming…
11 min read
JWKS Explained: JSON Web Key Sets and Keycloak Key Rotation
Learn what JWKS means, how to verify JWT signatures safely, and how to rotate Keycloak signing keys with overlap while…
13 min read
How to Verify a Keycloak Access Token on the Backend
Verify Keycloak access tokens on your backend: local JWT signature checks with JWKS, token introspection, claim validation, and Java, Node,…
11 min readKeycloak 'Token Not Active' Clock Skew: How to Fix
Fix Keycloak 'token is not active' and 'JWT issued in the future' errors caused by clock skew: sync server time…
7 min readKeycloak 'Account Already Exists' During Identity Brokering
Fix the Keycloak 'account already exists' error during social login and identity brokering: the first-login flow, account linking, and trusting…
10 min readIs Keycloak Overkill for a Startup?
Is Keycloak overkill for a startup? An honest look at flat pricing vs per-MAU fees, the real ops burden, and…
10 min read