Tag
client-credentials
Articles tagged with client-credentials.
security
12 min read
MCP Python SDK OAuth Flaw: Pin the Issuer on Keycloak
MCP OAuth flaw GHSA-qx49-fqc8-xw99: a malicious server could steal client secrets and PKCE verifiers from the MCP Python SDK. Upgrade,…
12 min read
security
12 min read
JADEPUFFER and Storm-3168: Retire Static Keycloak Secrets
Storm-3168 (JADEPUFFER) wiped Azure resources with compromised service principals. How the same client secret risk looks on Keycloak, and how…
12 min read
auth-patterns
9 min read
Machine-to-Machine Authentication with Keycloak
Implement machine-to-machine authentication in Keycloak using the client credentials grant for secure service-to-service communication and API authorization.
9 min read
Articles
3 min read
Client Credentials Flow with Skycloak and Node.js
Learn Client Credentials flow using Skycloak and Node.js. Implement secure machine-to-machine authentication with practical examples.
3 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.