5 min read
🤖 Keycloak's UserInfo endpoint returns 403 Forbidden when the Access Token lacks the `openid` scope. Notes on debugging the error through mozilla_django_oidc logs and fixing it by requesting the token with the right scope.
Tags
- 2 writings
- since 2024
2025
Summer
2024
Autumn
14 min read
From cookies to JWT: how the web works around HTTP's statelessness, and the trade-offs each step inherits.