How to organize authorization?

Question

Java

There is the following situation. There is a backend built on Spring Boot and a frontend on React. There was a question of the organization of authorization from FrontEnd. Those. so that when the user logs in from the frontend, he receives a token with which he signed all other requests. At first I wanted to do it using JWT, but now I'm thinking about doing it through Google's OAuth. Perhaps I misunderstand something, so I would like to hear criticism of this decision.

Answer 1

keycloak. It will be easier to customize in react.