All,
I've figured out how to configure Keycloak to accept tokens from Google's
Android APIs. This means that on Android I can log into a Keycloak
protected service without a web browser.
I've documented my setup in my blog post here :
https://blog.sagaoftherealms.net/?p=654
You can skip right to the demo here :
https://www.youtube.com/watch?v=FovbEW0VE0E
The Android source with modest build instructions is here :
https://github.com/secondsun/TokenExchangeDemo
Enjoy.