🤖 Keycloak's UserInfo endpoint returns 403 Forbidden when the Access Token lacks the `openid` scope. Notes on debugging the error through mozilla_django_oidc logs and fixing it by requesting the token with the right scope.
5 min read
Tags
- 2 writings
- since 2024
Summer ’25
Autumn ’24
From cookies to JWT: how the web works around HTTP's statelessness, and the trade-offs each step inherits.
14 min read