Testing Keycloak SPIs with Testcontainers: A Practical Guide

This article addresses the gap in Keycloak SPI tutorials by showing how to integration-test custom authenticators using Testcontainers. It explains how to boot a real Keycloak container, deploy the SPI jar, and wait for HTTP readiness. The key tip: use Wait.forHttp() instead of log-based waits to avoid race conditions.