title: Keycloak token in cookie for JAX-RS filter
body: <p>I'm using <code>keycloak-jaxrs-oauth-client</code> for securing my REST API with Keycloak. Previous version was home-made security with authentication status stored in Java session. </p>
  
  <p>The filter requires <code>Authorization: Bearer</code> token, which needed to be handled in Javascript making REST API calls, up to the place, where it's no longer possible: JAX-RS REST API exposes methods, that are used as classical GET requests in browser: URLs for downloading resources, custom pictures from DB etc. </p>
  
  <p>AFAIK it's not possible to make browser add custom headers to such requests. So the fallback to classic cookie approach would be a solution.</p>
  
  <p>Is there a parameter or wrapper that tells <code>keycloak-jaxrs-oauth-client</code> to use cookie when <code>Authorization</code> header is not present? I couldn't find such place in the source code of that library, but maybe I'm simply using wrong implementation for JAX-RS filter? I'm currently using <code>org.keycloak.jaxrs.JaxrsBearerTokenFilterImpl</code>.</p>