Is it compatible with Pydantic v2?

The provided configuration patterns use pydantic-settings, making it fully compatible with modern Pydantic v2 FastAPI applications.

Does it support token refreshing?

Yes, it provides an authentication service for exchanging refresh tokens for new access tokens and includes middleware to monitor token expiration.

How does this skill handle JWT validation?

It uses the python-jose library to decode tokens and validates them against Keycloak's JWKS endpoint for secure RS256 signature verification.

Can I use this for Role-Based Access Control (RBAC)?

Yes, it includes specific FastAPI dependencies to verify both realm-level and client-level roles before allowing access to specific API routes.

Keycloak FastAPI Integration

Name: Keycloak FastAPI Integration
Author: Lobbi-Docs

byLobbi-Docs

Desarrollo de API

Integrates Keycloak identity management and OIDC authentication into FastAPI backends with robust role-based access control.

Acerca de

This skill provides production-ready patterns for connecting FastAPI applications with Keycloak as an identity provider. It automates the setup of OIDC/OAuth2 configurations, implements secure JWT token validation using JWKS, and provides pre-built FastAPI dependencies for user extraction and granular role-based access control (RBAC). It is an essential tool for developers building secure enterprise APIs that require Single Sign-On (SSO), automated token refresh logic, and sophisticated multi-tenant authentication patterns.

Características Principales

Built-in OAuth2 authorization code and refresh token flows
Granular Role-Based Access Control (RBAC) decorators
Reusable FastAPI dependencies for current user context
0 GitHub stars
Automated OIDC and Keycloak configuration setup
Secure JWT validation with asymmetric RS256 signing

Casos de Uso

Implementing role-based permissions for internal API administration
Securing enterprise FastAPI microservices with Keycloak SSO
Managing multi-tenant authentication for SaaS applications

Acerca de

Características Principales

Built-in OAuth2 authorization code and refresh token flows
Granular Role-Based Access Control (RBAC) decorators
Reusable FastAPI dependencies for current user context
0 GitHub stars
Automated OIDC and Keycloak configuration setup
Secure JWT validation with asymmetric RS256 signing

Casos de Uso

Implementing role-based permissions for internal API administration
Securing enterprise FastAPI microservices with Keycloak SSO
Managing multi-tenant authentication for SaaS applications