oauth 2.0 - Spring oauth2 validate token request -
does oauth2resttemplate or access token providers support validate token request?
here flow:
- mobile/web-app authenticated third party authentication server , obtains access-token.
- user tries access secured resources, , passed access-token in request, expected protocol.
is possible check token against third-party server?
i found bit similar here in form of refresh token.
is validation request part of oauth2 standard?
thanks
no, oauth2 doesn't enforce specific token format or api validating tokens. has decided independently between resource server , authorization server.
for example, uaa project, uses spring security oauth2, uses signed jwt tokens, resource server can validate contents without having ask authorization server directly. provides /check_token
endpoint, decode token , verify has not expired.
Comments
Post a Comment