Spring Security in Action

13 OAuth 2: Implementing the authorization server

This chapter covers

• Implementing an OAuth 2 authorization server

• Managing clients for the authorization server

• Using the OAuth 2 grant types

In this chapter, we’ll discuss implementing an authorization server with Spring Security. As you learned in chapter 12, the authorization server is one of the components acting in the OAuth 2 architecture (figure 13.1). The role of the authorization server is to authenticate the user and provide a token to the client. The client uses this token to access resources exposed by the resource server on behalf of the user. You also learned that the OAuth 2 framework defines multiple flows for obtaining a token. We call these flows grants. You choose one ...