This traefik plugin middleware replaces the access token present in the http headers by a request to an endpoint (in our case keycloak) that returns an RPT Token.