<Mobile app auth with Keycloak calling a protected...

# stackoverflow

[user]

Mobile app auth with Keycloak calling a protected spring boot api
I am building a micro services architecture which constitutes of spring boot rest apis which will be consumed by mobile apps(nativescript or react native) and a SPA(vuejs).

I am using Keycloak for OpenId connect server. As I understand, I should be using client Access Type as public for mobile app and the spa. And, bearer token for APIs.

On the spring boot api some path are public to allow for registration/forgot-password actions on Keycloak and rest of the endpoints are protected....