Spring 5.0 Projects

OAuth authorization with a custom authorization server

Now, you have seen OAuth integration with Spring using third-party providers (Google). In this section, we will build a custom authorization server (provider) and do OAuth authorization. We will also build our own resource server, and we'll access the resources once the authorization is done.

In the previous section, the authorization code grant type was used with Google. We will implement an implicit grant type in this section. Let's recall that the implicit grant type was specially designed for JavaScript applications. Since it runs in a browser, the authorization server directly sends the access token. There is no support for refresh tokens, for security purposes.

We will first develop ...