openid-connect
Articles tagged with openid-connect.
What Is PKCE? Proof Key for Code Exchange Explained
PKCE protects the OAuth 2.0 authorization code flow from stolen codes. Follow one S256 exchange with real values, and learn…
12 min readWhat Is a Nonce in Security? Nonce vs State vs PKCE
A nonce is a number used once, a unique value that stops replay. Learn how nonces are generated and how…
14 min read
Python Authentication: Login Pages Without Storing Passwords
Build a Python login page that never stores a password: Flask and Authlib with PKCE, Keycloak as the identity provider,…
8 min read
Keycloak with Angular: Modern Integration Guide (vs MSAL)
Integrate Keycloak with Angular 22 using keycloak-angular v22: provideKeycloak, auto token refresh, functional interceptors, plus when MSAL fits instead.
9 min read
OpenID Connect Explained: A Developer's Guide with Keycloak
A developer's deep dive into OpenID Connect (OIDC) covering ID tokens, claims, scopes, discovery endpoints, and UserInfo with practical Keycloak…
11 min read
OIDC Discovery and Dynamic Client Registration Explained
Automate identity provider configuration with OIDC Discovery and Dynamic Client Registration to reduce errors, improve security, and scale efficiently.
11 min read
What Is Identity Federation? How It Works, Protocols and Keycloak
Identity federation explained: how IdPs and service providers trust each other over SAML and OIDC, how it differs from SSO,…
11 min read
SSO vs OAuth: Are They the Same Thing?
SSO vs OAuth: no, they are not the same. OAuth 2.0 lets an app call an API with limited permissions,…
11 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.