iam 2 Keycloak Token Exchange: An Auditable Frontend → BFF → Resource API Chain Jun 9, 2026 Keycloak Client Setups: Bearer-Only Resource Server + PKCE Frontend Client (Keycloak 26) Mar 15, 2026