So, if my Angular app is running on localhost:4200 & keycloak server running on localhost:8080/auth, which URL values should I add in allowedUrls array?

OAuthModule.forRoot({
    resourceServer: {
        allowedUrls: [...],
        sendAccessToken: true
    }
})

CodePudding user response：

localhost:4200 should be what you add to "allowedUrls". This tells the auth server that requests from your angular app are "allowed".