Reputation: 1029
I have 2 web applications:
They are mapped to one database.
I would like to split database for 2: one for client app and the second one for tokens.
Question: How client app should be configured correctly with oauth?
My current flow:
May be the best flow is to isolate auth app and database and flow should be something like this:
?
Let me know if I misunderstand any point about oauth. Thanks.
Upvotes: 0
Views: 240
Reputation: 58094
If you want use the auth server for checking tokens you need a RemoteTokenServices
(or the equivalent). If the server is a Spring Oauth sever (using @EnableAuthorizationServer
) there should be a /check_token endpoint.
N.B. It might be a good idea to read the spec and get the terminology straight (your "client app" is a "resource server".
Upvotes: 1