查看“︁Keycloak”︁的源代码

== Install ==
<syntaxhighlight lang="bash">
docker run --name example-keycloak \
  -p 8081:8080 -d \
  -e KC_BOOTSTRAP_ADMIN_USERNAME=admin \
  -e KC_BOOTSTRAP_ADMIN_PASSWORD=<change it> \
  quay.io/keycloak/keycloak:26.0.7 start-dev \
  --hostname=https://oauth.example.com
</syntaxhighlight>

Reversed proxy<ref>https://medium.com/@asynchronouscal/keycloak-production-mode-with-docker-step-by-step-guide-b284927e72c0</ref>:

<syntaxhighlight lang="config">
server {

    server_name oauth.example.com;

    location / {
        root   html;
        index  index.html index.htm;
        proxy_pass  http://localhost:8081;

	       proxy_redirect off;
           proxy_set_header Host $host;
           proxy_set_header X-Real-IP $remote_addr;
           proxy_set_header X-Forwarded-For $remote_addr;
           proxy_set_header X-Forwarded-Proto $scheme;
           proxy_set_header X-Forwarded-Port 443;
    }
    ...
}
</syntaxhighlight>

== Configure ==
* Create realm: my-org
* Create users: whatever
* Create client: my-app

* Client ID: my-app
* Valid redirect URIs: http://localhost:5173/auth/callback
* Valid post logout redirect URIs : http://localhost:5173
* Web origins: http://localhost:5173 (No slash at end!!!)
* Client authentication: off (for public clients)
* Authentication flow: Standard flow, Direct access grants


[[Category:OAuth]]