Using keycloak for authentication

[tpluscode]

I build a decap CMS with the "standard" netlify+github setup.

This is a bit limiting because in our setup we deploy the app to multiple environments and each requires separate netlify auth setup. We also have dynamic environments for PR previews.

The app itself is nuxt and we use keycloak and an external OIDC provider for authentication and authorization.

The documentation is a little unclear of how to tak advantage of our setup for authenticating decap.

1. Is any of the listed External OAuth Clients fit for that job?
2. Is there any docs or tutorial on building our own backed by our keycloak instance?
3. Once we have it, what would be the recommended way to authenticate GitHub? A low-effort approach could be to use a GitHub App and just set the users as PR assignee. That would require each user to fill in their GH user name in their profile somewhere but on the other hand we could also cater for users which do not have GH account in the first place...

[tpluscode]

ping @martinjagodic

[martinjagodic]

Sorry @tpluscode I have no experience with Keycloak + Decap, so I can't help you from the top of my mind. If you want, we can schedule a call where you tell me more about your use case. Contact me on Discord pelase.