Authentication

Mailoo uses Keycloak as the identity provider for dashboard sign-in and registration. The web app (Auth.js) redirects you to Keycloak; after a successful login you return to Mailoo with a signed session.

What you see

• One Sign in action in the product UI opens Keycloak (there is no separate in-app registration form).
• Login, registration, password reset, and email verification use a Mailoo-branded Keycloak theme (not the stock Keycloak UI).
• Locales match the site: English, German, Spanish, and Russian when the realm has internationalization enabled.
• Light/dark appearance follows the theme you use on mailoo.app (data-theme).

Implementation (brief)

• Theme name: mailoo (directory login theme, parent keycloak).
• Sources in the application repository: keycloak-theme/ (FreeMarker templates, CSS tokens, build script).
• CI builds a busybox carrier image keycloak-theme with layout /theme/mailoo/login/…. Operators install it into shared Keycloak via an initContainer copy to /opt/keycloak/themes/mailoo and set realm loginTheme=mailoo.
• Rollback: set realm loginTheme=keycloak (stock UI) without redeploying the web app.
• Realm settings such as SMTP and Verify email are configured on Keycloak, not in the Mailoo web application.

For developer build, local attach, and CI details, see the development guide docs/source/development/keycloak-theme.rst in the repository.