oauth 2.0 - Spring oauth2 validate token request -


does oauth2resttemplate or access token providers support validate token request?

here flow:

  1. mobile/web-app authenticated third party authentication server , obtains access-token.
  2. user tries access secured resources, , passed access-token in request, expected protocol.

is possible check token against third-party server?

i found bit similar here in form of refresh token.

is validation request part of oauth2 standard?

thanks

no, oauth2 doesn't enforce specific token format or api validating tokens. has decided independently between resource server , authorization server.

for example, uaa project, uses spring security oauth2, uses signed jwt tokens, resource server can validate contents without having ask authorization server directly. provides /check_token endpoint, decode token , verify has not expired.


Comments

Popular posts from this blog

Why does Ruby on Rails generate add a blank line to the end of a file? -

keyboard - Smiles and long press feature in Android -

node.js - Bad Request - node js ajax post -