client-credentials
Articles tagged with client-credentials.
What Is a Service Principal? How Vendor Apps Get App-Only Access
A service principal is an app's identity inside one tenant. See how vendor apps get app-only access, how to audit…
11 min readMCP Python SDK OAuth Flaw: Pin the Issuer on Keycloak
MCP OAuth flaw GHSA-qx49-fqc8-xw99: a malicious server could steal client secrets and PKCE verifiers from the MCP Python SDK. Upgrade,…
12 min readJADEPUFFER and Storm-3168: Retire Static Keycloak Secrets
Storm-3168 (JADEPUFFER) wiped Azure resources with compromised service principals. How the same client secret risk looks on Keycloak, and how…
12 min readMachine-to-Machine Authentication with Keycloak
Implement machine-to-machine authentication in Keycloak using the client credentials grant for secure service-to-service communication and API authorization.
8 min read
Client Credentials Flow with Skycloak and Node.js
Learn Client Credentials flow using Skycloak and Node.js. Implement secure machine-to-machine authentication with practical examples.
3 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.