User certificate interception by the Angular app

Question

I have two applications running in the OpenShift cluster:

1. Angular application as a frontend
2. Spring-boot2 as a backend

both are protected