(window.webpackJsonp=window.webpackJsonp||[]).push([[207],{631:function(e,t,r){"use strict";r.r(t);varo=r(56),n=Object(o.a)({},(function(){vare=this,t=e.$createElement,r=e._self._c||t;returnr("ContentSlotsDistributor",{attrs:{"slot-key":e.$parent.slotKey}},[r("h1",{attrs:{id:"oauth-2-0-resource-server"}},[r("a",{staticClass:"header-anchor",attrs:{href:"#oauth-2-0-resource-server"}},[e._v("#")]),e._v(" OAuth 2.0 Resource Server")]),e._v(""),r("p",[e._v("Spring Security supports protecting endpoints using two forms of OAuth 2.0 "),r("a",{attrs:{href:"https://tools.ietf.org/html/rfc6750.html",target:"_blank",rel:"noopener noreferrer"}},[e._v("Bearer Tokens"),r("OutboundLink")],1),e._v(":")]),e._v(""),r("ul",[r("li",[r("p",[r("a",{attrs:{href:"https://tools.ietf.org/html/rfc7519",target:"_blank",rel:"noopener noreferrer"}},[e._v("JWT"),r("OutboundLink")],1)])]),e._v(""),r("li",[r("p",[e._v("Opaque Tokens")])])]),e._v(""),r("p",[e._v("This is handy in circumstances where an application has delegated its authority management to an "),r("a",{attrs:{href:"https://tools.ietf.org/html/rfc6749",target:"_blank",rel:"noopener noreferrer"}},[e._v("authorization server"),r("OutboundLink")],1),e._v(" (for example, Okta or Ping Identity).\nThis authorization server can be consulted by resource servers to authorize requests.")]),e._v(""),r("table",[r("thead",[r("tr",[r("th"),e._v(""),r("th",[e._v("A complete working example for "),r("a",{attrs:{href:"https://github.com/spring-projects/spring-security-samples/tree/5.6.x/reactive/webflux/java/oauth2/resource-server",target:"_blank",rel:"noopener noreferrer"}},[r("strong",[e._v("JWTs")]),r("OutboundLink")],1),e._v(" is available in the "),r("a",{attrs:{href:"https://github.com/spring-projects/spring-security-samples/tree/5.6.x",target:"_blank",rel:"noopener noreferrer"}},[e._v("Spring Security repository"),r("OutboundLink")],1),e._v(".")])])]),e._v(""),r("tbody")]),e._v(""),r("p",[r("RouterLink",{attrs:{to:"/en/client/authorized-clients.html"}},[e._v("OAuth2 Authorized Clients")]),r("RouterLink",{attrs:{to:"/en/spring-security/jwt.html"}},[e._v("JWT")])],1)])}),[],!1,null,null,null);t.default=n.exports}}]);
