0

I have an application that uses Keycloak SSO for authenticaton. I have a confidential client registered on Keycloak. At the moment, for each HTTPS request from my front end to back end, I send the user's access token as a bearer token. In my NestJS guard, I use the public key of the realm to check the validity of the access token. I need to implement a mechanism for refreshing expired tokens. What is the best practice for this? Should I do it on the front end application or back end? And how would I do this on back end using NestJS?

Improve this question
Related questions
66
keycloak bearer-only clients: why do they exist?
15
Revoke Keycloak access token
1
What is the way to set up an authentication mechanism using keycloak initial access token?
Load 4 more related questions Show fewer related questions

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.