Spring Security - Third Edition

Authorization server

To enable the authorization server capability, we include the @EnableAuthorizationServer annotation in our configuration. The addition of this annotation will put an o.s.s.OAuth 2.provider.endpoint.AuthorizationEndpoint interface and an o.s.s.OAuth 2.provider.endpoint.TokenEndpoint interface into context. The developer will be responsible for securing the AuthorizationEndpoint (/oauth/authorize) with the @EnableWebSecurity configuration. The TokenEndpoint (/oauth/token) will be automatically secured using HTTP basic authentication based on the OAuth 2 client credentials:

    //src/main/java/com/packtpub/springsecurity/configuration/    OAuth2AuthorizationServerConfig.java    @Configuration    @EnableAuthorizationServer public class ...