By default Keycloak is deployed at a context root /auth which can be changed in the configuration.
Out Keycloak Server is deployed in the context root / which makes scribejava generate wrong URL's.

The problem is in

where auth/ is hardcoded.

In other Clients/Keycloak Lib's the context root has to be set in the url.