Secure login, done right the first time. I set up Keycloak so your users sign in once, and roles are enforced in both your Angular frontend and your Spring Boot backend.
What you get
Keycloak realm, clients, roles and groups, configured for development and production
Angular login with OIDC (PKCE), route guards, interceptors and silent token refresh
Spring Boot resource server with Spring Security: JWT validation and role-based access (RBAC)
Optional: Google or Microsoft login, and a login page in your brand design
Docker Compose setup so your team can run everything locally
Short documentation: how to add users, roles and new clients
How it works
Scoping call: your apps, user types and roles
Keycloak setup and backend security (week 1 to 2)
Angular integration and testing (week 2 to 3)
Handover call with your team
Ideal for: SaaS products and internal tools that need enterprise-grade login, or teams replacing a home-made auth system.
Why work with me
Integrated Keycloak and OAuth2/JWT in regulated insurance and SaaS projects
Redesigned Keycloak login screens to match a new design system
Runs Keycloak in production for my own SaaS products
Not included: Hosting and running Keycloak for you, and migrating existing user passwords from another system.
Secure login, done right the first time. I set up Keycloak so your users sign in once, and roles are enforced in both your Angular frontend and your Spring Boot backend.
What you get
Keycloak realm, clients, roles and groups, configured for development and production
Angular login with OIDC (PKCE), route guards, interceptors and silent token refresh
Spring Boot resource server with Spring Security: JWT validation and role-based access (RBAC)
Optional: Google or Microsoft login, and a login page in your brand design
Docker Compose setup so your team can run everything locally
Short documentation: how to add users, roles and new clients
How it works
Scoping call: your apps, user types and roles
Keycloak setup and backend security (week 1 to 2)
Angular integration and testing (week 2 to 3)
Handover call with your team
Ideal for: SaaS products and internal tools that need enterprise-grade login, or teams replacing a home-made auth system.
Why work with me
Integrated Keycloak and OAuth2/JWT in regulated insurance and SaaS projects
Redesigned Keycloak login screens to match a new design system
Runs Keycloak in production for my own SaaS products
Not included: Hosting and running Keycloak for you, and migrating existing user passwords from another system.