Endpoint for token requests as described in the OAuth2 spec. Clients post requests with a grant_type
parameter (e.g. "authorization_code") and other parameters as determined by the grant type. Supported grant types are handled by the provided {@link #setTokenGranter(org.springframework.security.oauth2.provider.TokenGranter) tokengranter}.
Clients must be authenticated using a Spring Security {@link Authentication} to access this endpoint, and the clientid is extracted from the authentication token. The best way to arrange this (as per the OAuth2 spec) is to use HTTP basic authentication for this endpoint with standard Spring Security support.
@author Dave Syer
|
|
|
|
|
|