Spring Security in Action

14 OAuth 2: Implementing the resource server

This chapter covers

• Implementing an OAuth 2 resource server

• Implementing token validation

• Customizing token management

In this chapter, we’ll discuss implementing a resource server with Spring Security. The resource server is the component that manages user resources. The name resource server might not be suggestive to begin with, but in terms of OAuth 2, it represents the backend you secure just like any other app we secured in the previous chapters. Remember, for example, the business logic server we implemented in chapter 11? To allow a client to access the resources, resource server requires a valid access token. A client obtains an access token from the authorization server and uses ...