Engineering - Keymate Blog
Category: Engineering
Runtime Protobuf Schemas in Keycloak's Embedded Infinispan
Keycloak offers no supported, configuration-only way to load runtime-mounted Protobuf schemas into its embedded Infinispan. This post walks through the extension pattern that bridges that gap through ProtoStream's documented initializer lifecycle, reviewed through a security and platform-engineering lens, with a runnable public demo.Ali Tuğrul Pınar
July 2026
Inside Keycloak Authorization: Resources & Policy Engine
A deep dive into Keycloak Authorization Services: how Resource Servers, Resources, Scopes, Policies, and Permissions fit together, and exactly how Keycloak decides permit or deny.Eren Kan
June 2026
Massive Identity Migration to Keycloak: Tuning the Pipeline for 12 Million Records per Hour
How cutting resources in half made our Keycloak migration six times faster. A deep dive into the performance bottlenecks, metrics, and tuning decisions that increased migration throughput from 2M to 12M identities per hour.Hüseyin Akdoğan
February 2026
Keymate's Guide to Reactive Data Migration
Designing a Restartable, Lossless, High-Throughput Migration Pipeline with database-backed work queues, bounded concurrency, and reactive execution.Hüseyin Akdoğan
January 2026