Archive

Authorization2 writings

7 篇

  1. Keycloak UserInfo 端点403 Forbidden 错误解决
    🤖 This post explains how to resolve a 403 Forbidden error from Keycloak's UserInfo endpoint. It details the necessity of the `openid` scope in Access Tokens for OpenID Connect authentication. Readers will learn to debug and fix this common issue by correctly requesting tokens with the required scope, ensuring successful user information retrieval.

    JWTAuthorizationAuthentication4 分钟

  1. Web Authentication & Authorization
    从 Cookie 到 JWT，Web 是如何绕过 HTTP 无状态特性的，每一步又留下了哪些权衡。

    WebAuthorizationAuthentication15 分钟