Newbie here...

We're needing to secure an AngularJS application hitting our REST API (and supporting customers hitting it directly).

I believe in this situation we need to utilize the Hybrid flow as there is no way to secure the secret in AngularJS.

Does Keycloak support this?

Thanks!