Mastering Microservices with Java - Third Edition

OAuth 2.0 client registration

The client that communicates with the authorization server to obtain the access key for a resource should first be registered with the authorization server. The OAuth 2.0 specification does not specify the way a client registers with the authorization server. Registration does not require direct communication between the client and the authorization server. Registration can be done using self-issued or third-party-issued assertions. The authorization server obtains the required client properties using one of these assertions. Let's see what the client properties are:

• Client type (discussed in the next section).
• Client redirect URI, as we discussed in the example of a Quora sign-in using Twitter. This is one ...