This is a great, easy to understand breakdown, thanks a bunch! I'm at the tail end of having to transition an existing, not well documented codebase from Identity Server to Keycloak and had zero experience with auth prior to starting. I found the jargon to be the toughest part, as well as learning the hard way all the little things that more experienced devs take for granted like the subtle differences in how the backend API is granted auth vs. how the front-end clients are granted auth.