Surprisingly your the only one who has mentioned Keycloak so far?! I switched several projects from Auth0 to it some time ago and didn't look back... particularly when they started tightening things since said projects were not even profitable.
I don't care. Transaction volumes to the auth are comparatively low and computers are cheap so keycloak is a good choice.