I have an SPA in which Keycloak is used for authentication.
On login, the SPA requests a token from keycloak and uses it in subsequent requests to the backend.