Pls look into STAC FastAPI which has path based authorization, and see if it can be used with Keycloak. https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/tree/main/examples/auth