diff --git a/Dockerfile b/Dockerfile
index b39b5e0..6bed7fb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM quay.io/keycloak/keycloak:22.0.5 as builder
+FROM quay.io/keycloak/keycloak:23.0.3 as builder
 
 LABEL maintainer="support@integrationeye.com"
 LABEL builder="Integsoft s.r.o"
@@ -32,7 +32,7 @@ RUN ["/bin/bash", "-c", "cp -Rv $INSTALL_FOLDER/templates/* $KC_FOLDER/themes/"]
 # add integsoft version of keycloak jars
 RUN ["/bin/bash", "-c", "cp -Rv $INSTALL_FOLDER/keycloak-modules/* $KC_FOLDER/lib/lib/main"]
 
-RUN /opt/keycloak/bin/kc.sh build --spi-email-sender-provider=aws-ses --spi-email-sender-provider-aws-ses-enabled=true --spi-email-sender-provider-aws-ses-region=$AWS_REGION
+RUN /opt/keycloak/bin/kc.sh build --spi-email-sender-provider=aws-ses --spi-email-sender-provider-aws-ses-enabled=true --spi-email-sender-provider-aws-ses-region=$AWS_REGION --features="token-exchange"
 RUN /opt/keycloak/bin/kc.sh show-config
 
 WORKDIR /opt/keycloak
diff --git a/files/keycloak-modules/org.keycloak.keycloak-server-spi-22.0.5.jar b/files/keycloak-modules/org.keycloak.keycloak-server-spi-22.0.5.jar
deleted file mode 100644
index df1c792..0000000
Binary files a/files/keycloak-modules/org.keycloak.keycloak-server-spi-22.0.5.jar and /dev/null differ
diff --git a/files/keycloak-modules/org.keycloak.keycloak-server-spi-23.0.3.jar b/files/keycloak-modules/org.keycloak.keycloak-server-spi-23.0.3.jar
new file mode 100644
index 0000000..2482fcc
Binary files /dev/null and b/files/keycloak-modules/org.keycloak.keycloak-server-spi-23.0.3.jar differ
diff --git a/files/keycloak-modules/org.keycloak.keycloak-server-spi-private-22.0.5.jar b/files/keycloak-modules/org.keycloak.keycloak-server-spi-private-22.0.5.jar
deleted file mode 100644
index 70127bf..0000000
Binary files a/files/keycloak-modules/org.keycloak.keycloak-server-spi-private-22.0.5.jar and /dev/null differ
diff --git a/files/keycloak-modules/org.keycloak.keycloak-server-spi-private-23.0.3.jar b/files/keycloak-modules/org.keycloak.keycloak-server-spi-private-23.0.3.jar
new file mode 100644
index 0000000..6c8ae17
Binary files /dev/null and b/files/keycloak-modules/org.keycloak.keycloak-server-spi-private-23.0.3.jar differ
diff --git a/files/keycloak-modules/org.keycloak.keycloak-services-22.0.5.jar b/files/keycloak-modules/org.keycloak.keycloak-services-23.0.3.jar
similarity index 60%
rename from files/keycloak-modules/org.keycloak.keycloak-services-22.0.5.jar
rename to files/keycloak-modules/org.keycloak.keycloak-services-23.0.3.jar
index c9bcba5..8d51c9f 100644
Binary files a/files/keycloak-modules/org.keycloak.keycloak-services-22.0.5.jar and b/files/keycloak-modules/org.keycloak.keycloak-services-23.0.3.jar differ
diff --git a/files/keycloak-modules/org.keycloak.keycloak-themes-22.0.5.jar b/files/keycloak-modules/org.keycloak.keycloak-themes-22.0.5.jar
deleted file mode 100644
index 9045ba9..0000000
Binary files a/files/keycloak-modules/org.keycloak.keycloak-themes-22.0.5.jar and /dev/null differ
diff --git a/files/keycloak-modules/org.keycloak.keycloak-themes-23.0.3.jar b/files/keycloak-modules/org.keycloak.keycloak-themes-23.0.3.jar
new file mode 100644
index 0000000..87f42a3
Binary files /dev/null and b/files/keycloak-modules/org.keycloak.keycloak-themes-23.0.3.jar differ
diff --git a/files/modules/mbta-keycloak-aws-ses-email-provider-1.2.0.jar b/files/modules/mbta-keycloak-aws-ses-email-provider-1.2.0.jar
index 3e5f76e..08e1ecd 100644
Binary files a/files/modules/mbta-keycloak-aws-ses-email-provider-1.2.0.jar and b/files/modules/mbta-keycloak-aws-ses-email-provider-1.2.0.jar differ
diff --git a/files/modules/mbta-keycloak-browser-authenticator-1.2.1.jar b/files/modules/mbta-keycloak-browser-authenticator-1.3.0.jar
similarity index 70%
rename from files/modules/mbta-keycloak-browser-authenticator-1.2.1.jar
rename to files/modules/mbta-keycloak-browser-authenticator-1.3.0.jar
index 11d89c9..a5784e5 100644
Binary files a/files/modules/mbta-keycloak-browser-authenticator-1.2.1.jar and b/files/modules/mbta-keycloak-browser-authenticator-1.3.0.jar differ