What is the recommended approach for calling Keycloak using a service account token?
Is it to always request a new token on each interaction? Cache tokens in something like Redis for the expiry time period of the token?
Currently to perform admin actions on users in my APIs and services I am requesting a new service account token for each action.
Because of this if I were to perform multiple actions on users within a small timeframe I would be calling Keycloak every time for a token and then again using that token. This does not seems ideal.
Does anyone have recommendations or does Keycloak have some suggested guidance in their docs that I missed? Thank you!