title: Way to Secure token generated by OAuth server
body: <p>I am exploring OAuth implementation using keycloak. Whenever we authenticate on client, keycloak returns JWT token to the client application. This token has to be persisted in client end for further communication. Chance of token hijack is high in this scenario.</p>
  
  <p>Can anyone suggest better option to securely transfer the token between client and server? </p>