Blog

Customizing a Keycloak login theme is styling. Doing it for a second brand without copying the first one is architecture. Here is how a base theme, four theme-resolution rules, and 58 design tokens turn a new branded login and email experience into twenty lines of properties and a logo.

OAuth 2.0, OpenID Connect, JWTs, and Keycloak get mentioned in the same breath so often they blur into one vague thing called "authentication." They are not one thing. Here is where each one actually does its job, traced through a real login from an Angular app to a Keycloak realm to a Spring Boot API.

My CI validated the source tree while npm shipped something slightly different. Here is how I rebuilt the compatibility pipeline around the packaged artifact users actually install.

Four projects in, I was copying the same api.service.ts instead of writing it. The design decisions behind extracting it into @ismailza/ngx-api-client.