[etimberg]

If you know your way around it, Keycloak is good. But it seems quite easy to get into some paint points. I was using it recently and accidentally sent something that wasn't valid JSON. Instead of a 400 return code with some kind of message you get a 500 and the server coughs up a giant stack trace.