I was looking at keykloak examples for client credentials flow examples,
and it looks like the everything required is located in adapter-core
module, especially AdapterRSATokenVerifier and ServerRequest classes.
But I wonder if it safe to use this module in terms of API stability and
documentation, or I should better stick to some 3rd party OpenID client,
that will do all the fancy things with token validation, key retrieval,
caching etc.
Best Regards,
Vitalii