OIDCLoginProtocolService was becoming very bloated, especially once I added single for authorization and token endpoints. So I've extracted the logic into a few sub-resources: * AuthorizationEndpoint - login + registration * LoginStatusIframeEndpoint * LogoutEndpoint * TokenEndpoint * UserInfoEndpoint * ValidateTokenEndpoint I've not committed it yet as I need to do a bit more testing first, but wanted to give everyone a heads up. If anyone wants to review it before I commit have a look at https://github.com/stianst/keycloak/tree/oidc