keycloak-theme-development VS Keycloak

To make things even simpler for you, we have prepared a fully functional setup as Git repository.

Some random example: https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/services/managers/DefaultBruteForceProtector.java

You also need to set up a new Route that generates and signs the token using the public-api plugin. In this scenario, API Gateway acts as an identity provider server to create and verify the token with our consumer jack’s key. The identity provider can be also any other 3rd party services such as Google, Okta,  Keycloak, and Ory Hydra.

Does it need to be in Go? Keycloak is a fully featured IDP/OIDC provider. If you just want to support the protocol, it shouldn't really matter what language it is in, unless you want to do something very customized. https://www.keycloak.org/

openid-connect plugin that interacts with the identity provider(IdP) and can intercept unauthenticated requests in time to back-end applications. As an identity provider, we use the Okta that issues a JWT token with our custom claim and validates the JWT token. Or you can use other IdPs such as Keycloak, and Ory Hydra, or you can even use jwt-plugin to create a JWT token, and authenticate and authorize requests.

The high-level summary is: use encrypted protocols, and multifactor authentication to services, preferably with SSO by using an identity provider service (which you can host yourself with something like Authentik, Keycloak or Gluu, or leverage an outside IdP service).