Keycloak Client Passwords are insecure by default

And the maintainers refuse to change that, responding with bureaucratic measures and general ignorance. When you have an UUID string, example “192c1916-de80-4003-a01b-b2eaf97a1721” first of all those aren’t 128 bits. You have a representation of those 128 bits and a very limited set of characters 0123456789abcdef, so you represent those 128 bits in only 16 characters…

Read Article

Vue and Keycloak do not have a proper JS client that works with mobile native

There are currently 2 packages to integrate keycloak-js with your Vue 3 WEB app. https://github.com/dsb-norge/vue-keycloak-js and https://github.com/baloise/vue-keycloak But each have their quirks and issues. If you want to use keycloak in a native app, none of these work. There is keycloak-ionic and someone created a repo https://github.com/marchalb/qkeycloak to showcase a modified version of dsb-norge/vue-keycloak-js and…

Read Article

Golang get openid-connect userinfo

It might not be news to you, but this will explain a little bit about Go, making http requests and parsing the result. OpenID-Connect (oidc) is an identity protocol, you could call it an Oauth2 dialect. It manages your users per realm, well not the protocol but the server does. Every oidc idp (identity provider…

Read Article

The stupidity and ambiguitiy of Vue

Rant mode: Which idiots name template references “ref” and then name essentially all composition api variables “ref()” as well!?! YEAH GOOD FUCKING JOB VUE DEVELOPER IDIOTS It makes searching for answer so much more fucking frustrating! Fucking idiots.

Read Article