Testing with the local authorization server

In this section we will try out the secured system landscape; that is, we will test all the security components together. We will use the local authorization server to issue access tokens. The following tests will be performed:

1. First, we build from source and run the test script to ensure that everything fits together.
2. Next, we learn how to acquire access tokens using OAuth 2.0 grant flows: password, implicit, and code grant flows.
3. Finally, we will use access tokens to call APIs. We will also verify that an access token issued for a reader client can't be used to call an updating API.

Building and running the automated tests

To build and run automated tests, we perform...