Popular repositories Loading

1. keymate-migrator keymate-migrator Public

   Reliable Keycloak user migration at scale. Features include bounded concurrency, durable retries, and zero data loss.

   Java 33 3

2. keycloak-runtime-protobuf-schemas-demo keycloak-runtime-protobuf-schemas-demo Public

   Runtime-mounted Protobuf schemas in Keycloak's embedded Infinispan — minimal SerializationContextInitializer extension, tests, and one-command demo.

   Java 8

3. keymate-authz-toolkit keymate-authz-toolkit Public

   Fine-grained authorization toolkit: Access Rules DSL, Access Rule Engine, and the kmctl authz CLI for validate, simulate, and explain workflows

   Java 5

4. keycloak-ambient-authz-uma keycloak-ambient-authz-uma Public

   Zero-code, secret-free token exchange & authorization at the Istio Ambient waypoint — a Proxy-Wasm PEP exchanges the caller's JWT for a resource-scoped RPT via Keycloak's UMA-ticket grant, then inj…

   JavaScript 1

5. keymate-apisix-dpop-plugin keymate-apisix-dpop-plugin Public

   RFC 9449 DPoP validation plugin for Apache APISIX. Protects against token theft with sender-constrained access tokens. Supports both Native Lua and Go WASM implementations.

   Go

6. keycloak-ambient-authz keycloak-ambient-authz Public

   Zero-code service authorization on Kubernetes: Keycloak-backed decisions, enforced with Istio Ambient (Proxy-Wasm PEP at the waypoint, full | OpenTelemetry observability

   Go