title: Is there a way to obtain user data if the Keycloak authentication is done on Apache level, not front-end application
body: <p>Generally, there are at least 2 options of securing applications using Keycloak OpenID Connect stack:</p>
  
  <ol>
  <li>Use it on the application using Keycloak <code>adapters</code> (in my case, a SPA javascript front end)</li>
  <li>Use it on Apache using <code>mod_auth_openidc</code></li>
  </ol>
  
  <p>If I choose to use number 2, how can I obtain the user data (username, for example)? </p>
  
  <p>------------------------Edit due to @Cyril Dangerville answer -----------------</p>
  
  <p>While I understand the general approach, my way is seemed very forced.</p>
  
  <ol>
  <li><p>Now my authenticated, my request has session cookie and access token headers, but cannot access any header due to being initial page load</p></li>
  <li><p>Perform an call to any protected resource to get access Header value</p></li>
  <li><p>Use the access token to call the userinfo end point (But this is on another domain so the cookie wont get submitted)</p></li>
  </ol>
  
  <p>Can you help me by explain where I should go here?</p>