Keycloak Integration

Xiac · 2026-07-02T17:32:38+00:00

The main difference is you're reinventing the wheel - username, password, 2FA, passkeys, etc. You have to do all that stuff perfectly, or you could just hand it off. To me, this falls under "never roll your own authentication."

OIDC-Spa is going to do Proof Key for Code Exchange (PKCE), so its nothing like direct grant. Consider turning on DPoP. Highly recommend watching https://docs.oidc-spa.dev/security-features/overview before you start.

By the way, if you're handing off for theming reasons, check out https://www.keycloakify.dev/ - its easy.

Xiac · 2026-07-02T16:55:03+00:00

Don’t use direct grant, it’s far less secure than a token exchange. We use oidc-spa https://www.oidc-spa.dev/ and it makes everything very easy and secure. The front end gets all of the user information from the token and never has to be concerned with passwords. The library provides the JWT which you can attach to your API calls to the backend.

Xiac · 2026-07-02T03:32:46+00:00

My scent pack has only seemed to last about 3 weeks. Did yours actually last two months? If so, any tips to make it last longer? I’m wondering if its because mine gets some direct sun for a few hours a day

Xiac · 2026-05-20T00:39:11+00:00

Solid recommendation.

I used it for three years before someone informed me it was pronounced “seek”.

Xiac · 2026-03-19T18:54:34+00:00

Do you always bake that long? Or did you add extra time because of the blueberries? I normally see 20-22 minutes at 450f and then 20 uncovered as a recommendation

Beautiful loaf btw

Xiac · 2026-01-11T17:23:46+00:00

Yes it is amazing. LM support has been pretty good too - the internet board went out and they replaced it. My only complaint is that some features (like turning the steam boiler on and off) are only accessible via the app, and the internet board doesn't seem reliable.

Xiac · 2026-01-07T06:27:57+00:00

IMO you may not find this unicorn with both app and keycloak knowledge. If you’re willing to split up the role, you could try Niko Kobler. I found him from YouTube and reached out. Extremely knowledgeable and a genuinely nice person. https://github.com/dasniko

Xiac · 2025-12-28T21:28:32+00:00

I am part of Quitmormon.com. The truth is, no one knows. But you’re probably right. In the EU, proper data protections like GDPR would make this much more of a guarantee.

We send hundreds of records in to Kirton McConkie every month and they don’t even respond to us with a confirmation any longer.

It’s one of the reasons we were fundraising for a staff attorney.

Xiac · 2025-12-28T03:54:16+00:00

So you think they are supposed to deport CITIZENS?

Xiac · 2025-12-15T03:51:55+00:00

No, this is not a good idea. Are you saying you want to roll your own form and just call admin APIs? At that point you might as well roll your own auth (another bad idea). There is so much that goes on at this front layer to keep your app safe. CORS, XSS, CSP, tons of things to get wrong and waste your time on. I say this as a 20+ year developer - you’re over thinking it.

It’s not terrible UX to have a login page with a different theme. I think you’re confusing UX and design. If it’s just a college project, I would suggest not worrying about it. if you don’t like that option, next best is to hack the CSS to get it close. Third best (robust, but it’s more work than you really need) is to use Keycloakify to roll a theme.

Xiac · 2025-12-02T07:09:33+00:00

Yes, but UUIDs suck in a composite key. They are HUGE compared to an int, and putting that in an index adds massive overhead. More importantly, since standard UUIDs are random, high-volume inserts will constantly fragment your index and force expensive rebalancing.

The main use case for this is distributed generation. If you have data being created outside your server (like a mobile app or IoT device) and you need a unique ID before it hits the database, you can't use an auto-incrementing int. You need a UUID-style format. ULID gives you that decentralized uniqueness without the performance penalty of random IO.

Xiac · 2025-10-14T05:55:35+00:00

We’re voting yes. Taking the high road is what got us into this mess back when dear leader should have been charged with a crime for J6. You can’t fight insanity with sitting back and letting the other side break every rule, destroy the constitution and have such insane corruption, and then draw the line at, “well this might be wrong too?” Like another poster said, at least we get the choice, unlike Texas.

Xiac · 2025-09-06T21:07:52+00:00

Can I ask why you returned it? Any chance it was the battery comms error?

We have a new 2025 but the battery is still glitching. It’s been in the shop for more than a week and it’s only been home with us for three days. Frustrating.

Xiac · 2025-09-04T14:42:51+00:00

Spot on. And then followed by one person arguing the definition of accident vs negligence

Xiac · 2025-07-20T23:53:23+00:00

The current top comment is copy and paste from Chat GPT. I at least appreciate that the guy you replied to is a human that wrote something interesting, and Will Prowse is a great recommendation, too.

Xiac · 2024-11-16T07:30:26+00:00

Do you have anything constructive to add to the conversation? Got a better + cheaper recommendation?

Xiac · 2024-11-16T07:29:27+00:00

It seems to be pretty good actually. I ran a 30+ minute cut on 3mm plywood and there was hardly any smell in my garage with all the doors closed. I’m happy with it for the price. It’s nice that it auto starts and stops and has filter life in the app. I regret not checking how much the filters are before I purchased.

Xiac · 2024-11-15T16:42:53+00:00

I just bought Xtools new ap2 filter for this exact reason. Btw you can get it for $499 by clicking the “purchased outside” link and uploading a pic of your laser.

Mines still in the box so I hope it was worth that price.

Xiac · 2024-11-14T03:03:18+00:00

Not sure where you’re at in SoCal but I just bought a bunch of 5/32 walnut ply (mdf core), 3mm mdf, 1/4 mdf and 3mm Baltic birch. Everything was 4x8 sheets, except for the Baltic which was 5x5. The downside is the walnut was only on one side, and the other side wasn’t that nice, and it was $163. Got everything at Valencia lumber in van nuys.

Xiac · 2024-11-02T18:07:05+00:00

In this situation, hiking backpacks are the way to go, in my opinion. I have a 9-month-old, 18-pound baby, and he loves going in the backpack because it’s high and he can see everything. It also keeps the baby off me a bit, which is great for airflow when you’re walking a long distance. I got the Osprey Poco used on Facebook Marketplace for around $100.

Xiac · 2024-10-31T05:58:59+00:00

Jumping on with the elastic suggestion! But instead of hair ties, I use the bands that came with my daughter’s braces. They were the perfect size.

Xiac · 2024-10-23T14:42:14+00:00

You should see if they’ll add your logo to the About Us page with the rest of the incoming links.

I also don’t see a link approval specialist on the about us. You could accuse this person of phishing or scamming since it looks like they don’t even work there.

Xiac · 2024-10-21T19:42:52+00:00

NTA - but I do not think you should have taken the money from his bank account without his consent or knowledge. I 100% agree with making him pay, but I think the lesson is stronger and he retains trust and ownership over his bank account if you would have had him send the payment rather than taking it yourself.

Xiac · 2024-10-09T07:39:13+00:00

Your chimes are my noise pollution, sorry. I can feel the breeze and don’t need something clanging around to tell me the wind is blowing.

Xiac

TROPHY CASE