Introduction

The last chapter presented you with how to create your own OAuth 2.0 Provider by implementing both the Authorization Server and Resource Server. All the interactions with the OAuth 2.0 Provider were made using direct requests through the CURL command-line tool. This chapter will show you how to create client applications using Spring Security OAuth2 and the RestTemplate interface. As this chapter is focused on client applications (that is, the third-party application that can be granted permissions by the Resource Owner), you will also see how to manage refresh tokens at the client side.

Note

All recipes in this chapters does not use TLS/SSL when interacting with the OAuth Provider just for didactical purposes. When running in production, you must use TLS/SSL to protect every communication between the Client and the OAuth Provider.