OAUTH 2 Resource server
Set up OAuth 2 Resource Server protection using Spring Security for your API. Reuse the client_id and client_secret for both the client and resource server, and the test_* scopes from seminar 09. Use different scopes for different methods where it makes sense. (The client is registered for http://localhost:8080 only, the authorization server will not redirect back to other locations. Use the client just to get an access token, no need to implement the UI);
We need two scopes:
-
One for Airport manager - scope: test_2 -
One for Airline manager - scope: test_1
TODO:
-
NEED TO CHANGE APLICATION.YML - make it simplier -
why does steward have 2 get by id? -
Remove google login -
Figure out overlapping scopes
Edited by Matěj Gorgol