Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens

1. casdoor

   1 37 8,028 0.0 Go

   Discontinued An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA and RADIUS [Moved to: https://github.com/casdoor/casdoor]

   

   I'm using Casdoor: https://github.com/casbin/casdoor and glad to see it only has ~77,000 LOC according to the shared link.

   Keycloak was good but has too much legacy for 10+ years. Casdoor is pretty new and has become a good replacement for Keycloak for me with more functionalities.

2. InfluxDB

   www.influxdata.com featured

   InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

   

3. Keycloak

   2 266 27,198 10.0 Java

   Open Source Identity and Access Management For Modern Applications and Services

   

   > Keycloak was good but has too much legacy for 10+ years.

   I got curious, actually seems to check out and explains why it's so well documented (but also complex and oftentimes confusing):

   > The first production release of Keycloak was in September 2014, with development having started about a year earlier.

   https://en.wikipedia.org/wiki/Keycloak

   https://github.com/keycloak/keycloak/releases/tag/1.0.0.Fina...

Suggest a related project