Keycloak deprecates most Keycloak adapters, including Spring Security and Spring Boot

On February 14th, the Keycloak team announced that they are deprecating most Keycloak adapters.

Including the Spring Security and the Spring the Boot adapter, which means that in the future Keycloak team will no longer be available for the Spring Security and the Spring Boo integrated program of t.

Keycloak project provides a large number of adapters to provide an integrated solution for other ecosystems, but as mentioned in the official statement of Keycloak :

Keycloak adapters don't get the love and attention they need.

With Valentine's Day approaching, the statement means a lot. The statement said that Keycloak team will deprecate the maintenance of most adapters and focus more on the Keycloak server itself. In addition, the Keycloak will also provide guidance programs for the security of various applications through getting started guides, and even adapter alternatives.

List of expiring adapters:

• OpenID Connect Java adapters
• OpenID Connect Node.js adapters
• SAML Tomcat and Jetty adapters
• OpenID Connect WildFly adapters
• Spring Security 、Spring Boot adapters

Of course there are some adapters that will continue to be maintained:

• OpenID Connect client-side JavaScript adapter
• SAML WildFly and servlet filter

Keycloak has also published a timeline for the expiration of related adapters:

• February 2022: Adapter deprecated
• September 2022: No major/minor releases for adapters anymore
• December 2022: Micro Adapter no longer released

Keycloak is currently the most powerful OIDC server, and its learning cost is relatively high, which is also an important reason why its adapter is not popular. Product iteration may not always be an addition, and being able to make timely decisions and get rid of burdens is not necessarily a bad thing. Keycloak can still be connected through the protocol specification simply as an authorization server, but without the support of the adapter, the features it has accumulated over the years are easy to be buried, and it cannot directly play more roles in other technologies.

Follow the official account: Felordcn for more information

Personal Blog: https://felord.cn