Big fan of Keycloak personally, but I'm also deep in the Quarkus/JVM ecosystem and Quarkus makes deving against Keycloak extremely easy.

Asking as someone who's only every rolled his own or used Cognito: What's the problem with Auth0?

Ory stack has been working very well for us.