Tag
client-authentication
Articles tagged with client-authentication.
security
9 min read
Keycloak Client Authentication Without Secrets: Signed JWT (private_key_jwt)
Replace Keycloak client secrets with Signed JWT (private_key_jwt): the client signs a short assertion with its own key. Setup, code,…
9 min readauth-patterns8 min read
Workload Identity Federation to Keycloak: SPIFFE JWT-SVID as Client Auth
An IETF draft lets workloads authenticate to an OAuth server with SPIFFE JWT-SVIDs, not client secrets. What it specifies and…
8 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.