java - Spring security OAuth2 JWT stateless Implicit -


i have restful api secured spring security using oauth2 using resource owner credentials grant , jwt tokens. scheme works fine when in comes internal clients plus chosen due stateless nature, allow third party developers integrate api , above mentioned grant not best solution, instead implicit and/or authorization code scheme preferred.

after checking on different spring security samples have seen whenever implicit or , authorization code used, authentication state-full, correct me if wrong oauth2 spec not specify session needed in step.

so questions are:

  • is possible configure stateless authentication following grant schemes?
  • is there reason why samples based on http session?

best,


Comments

Popular posts from this blog

java - WARN : org.springframework.web.servlet.PageNotFound - No mapping found for HTTP request with URI [/board/] in DispatcherServlet with name 'appServlet' -

html - Outlook 2010 Anchor (url/address/link) -

android - How to create dynamically Fragment pager adapter -