https://ashish1099.me/tags/oauth/ Recent content in Oauth on Ashish Jaiswal Hugo -- 0.147.0 en-us Tue, 14 Jul 2026 09:00:00 +0530 https://ashish1099.me/posts/mattermost-team-edition-keycloak-openid-scope-catch22/ Tue, 14 Jul 2026 09:00:00 +0530 https://ashish1099.me/posts/mattermost-team-edition-keycloak-openid-scope-catch22/ Any Keycloak from 20 onward enforces the openid scope on /userinfo, which breaks Mattermost Team Edition’s Keycloak-as-GitLab SSO. The fix everyone tries first makes it worse. Here’s what actually breaks, and the one client scope on Keycloak’s side that makes it work.