In this post, we will be talking about how we can implement Spring authorization server using spring security oauth2 .

Introduction

We have learned about OAuth - 2.0 specification in previous articles and how we can implement OAuth - 2.0 client credentials grant flow working with spring’s authorization server. In this article, we’re going to see how we can implement authorization code grant flow get working with spring security.

According to the OAuth-2.0 specification, authorization code grant flow is a two-step process mainly used by confidential clients(a web server or secured application that can promise the security of credentials). In the first step, we request the authorize endpoint to get authorization code from the authorization server and then use it to get an access token from the authorization server at the token endpoint.

#security #tutorial #spring-boot #spring-security #authorization code grant #oauth2.0 #authorizationserver