I'm trying to secure my Node.JS app with Keycloak, but my app doesn't use express. I have searched extensively, but to me, it seems like this is impossible, at least with the libraries provided officially by Keycloak. (“keycloak without express” just turns up no results at all)

I'm somewhat new to the keycloack ecosystem though, and would be delighted if anyone could offer some solution to my problem!

CodePudding user response：

Keycloak offers Node.js adapter. Yes, examples in the doc are for express.js, but nothing stopping you to use it in any Node.js app (of course it depends how that Node.js app is implemented).

Anyway, Keycloak is not based on any legacy protocol, but on the OIDC standard, so you can use any OIDC library. It really doesn't need to have 'keycloak' in the name. You can start from OIDC certified libraries.