title: How do you hide keycloak.json in URL
body: <p>I'm currently setting up an angular4 project with keycloak integration. And so as I follow the examples from keycloak github repository (angular2-product-example), I created a keycloak.json client configuration file and uploaded it on my web project, which is accessible via web url. I need it there so that I can initialized the js adapter:</p>
  
  <pre><code>let keycloakAuth: any = new Keycloak('keycloak.json');
  </code></pre>
  
  <p>But I have a concern with regards to security, the configuration with keycloak's client secret is accessible from the url. How is it normally secured in this case?</p>