PIN storage an authentication flow working with keyCloak

[dubdabasoduba]

For our current set up where we intend to fully replace username/password with pin we’d need an implementation that interfaces with Keycloak directly, otherwise the user will always at one time need to remember/use their actual credentials from Keycloak to log in e.g. when the refresh token expires.

Might be worthwhile investigating/researching on ways of adding support for pin login on Keycloak e.g. this may be feasible by implementing a Service Provider Interface(SPI) for this custom authentication .

See documentation on Keycloak Authentication SPI

Originally posted by @ndegwamartin in #1606 (comment)