My clients are separate angularjs applications that use keycloak.js to communicate with Keycloak. The long urls are always present: when I redirect back to the main route after login and on every subsequent route change. I use the keycloak.js that automatically resides on the running Keycloak server rather than the downloadable version.