Tag

oauth2

Articles tagged with oauth2.

auth-patterns

OAuth for Mobile Apps: Best Practices with Keycloak

Learn mobile OAuth best practices with Keycloak including PKCE, secure token storage, refresh rotation, and biometric binding for iOS and…

Guilliano MolaireGuilliano Molaire11 min read
Definition and Basics

API Authentication Best Practices in 2026

Comprehensive guide to API authentication in 2026 covering OAuth 2.0 with PKCE, mTLS, DPoP, JWT validation, token introspection, and choosing…

Guilliano MolaireGuilliano Molaire7 min read
Spring Boot + Keycloak OAuth 2.0: The Complete 2026 Guide
Tutorials

Spring Boot + Keycloak OAuth 2.0: The Complete 2026 Guide

The complete guide to securing Spring Boot 3.x apps with Keycloak using spring-security-oauth2-resource-server, JWT validation, and method-level security.

Guilliano MolaireGuilliano Molaire10 min read
OpenID Connect Explained: A Developer's Guide with Keycloak
Definition and Basics

OpenID Connect Explained: A Developer's Guide with Keycloak

A developer's deep dive into OpenID Connect (OIDC) covering ID tokens, claims, scopes, discovery endpoints, and UserInfo with practical Keycloak…

Guilliano MolaireGuilliano Molaire11 min read
Authenticating AI Agents with Keycloak: OAuth 2.0 for LLM Apps
auth-patterns

Authenticating AI Agents with Keycloak: OAuth 2.0 for LLM Apps

Learn how to authenticate AI agents and LLM-powered applications with Keycloak using OAuth 2.0 client credentials, scoped tokens, and MCP…

Guilliano MolaireGuilliano Molaire9 min read
Tutorials

Keycloak + Kong API Gateway: End-to-End Setup

Learn how to integrate Keycloak with Kong API Gateway for authentication using the OIDC plugin for JWT validation, rate limiting,…

Guilliano MolaireGuilliano Molaire8 min read
Definition and Basics

API Keys vs OAuth: When to Use Each with Keycloak

Decision guide comparing API keys and OAuth tokens for API security. Learn when to use each approach, hybrid patterns, and…

Guilliano MolaireGuilliano Molaire9 min read
Tutorials

Keycloak + Rust (Axum): Secure Your Rust Web API

Learn how to secure a Rust Axum web API with Keycloak OIDC JWT validation, JWKS key fetching, role-based access middleware,…

Guilliano MolaireGuilliano Molaire10 min read
auth-patterns

Keycloak Token Exchange: Practical Implementation Guide

Implement Keycloak standard token exchange (RFC 8693) in 26.x: enable it per client, set up audiences, and call it from…

Guilliano MolaireGuilliano Molaire10 min read
How OAuth 2.0 Works: A Developer's Visual Guide
Definition and Basics

How OAuth 2.0 Works: A Developer's Visual Guide

Visual developer guide to OAuth 2.0 grant types including authorization code with PKCE, client credentials, and device flow with Keycloak…

Guilliano MolaireGuilliano Molaire11 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.