Thanks, your article is what I was hoping for when I clicked the OP. I've been putting all my self hosted services behind OIDC recently using Authentic and I've been wanting to actually understand how the flow works under the hood, this really helped

Is it "keycloak.example.com" or "kc.example.gr"?

> ...and your keycloak server is hosted on https://keycloak.example.com. This realm will have a base url with the value: https://kc.example.gr/realms/sample-realm/...

Ah thanks for catching this!