Mabe this helps -> How to secure mobile apps? or https://www.keycloak.org/docs/latest/securing_apps/#android