I need to create a mobile application that consumes services from a keycloak protected services, users don't create an account, but I don't want people outside the app to consume the services.

How can I send the token authenticate on the mobile app the same way I authenticate on websites. meaning having a keycloak.json key or something

Any thoughts?