1
1
Separate Resource Server
2
2
========================
3
- Django OAuth Toolkit allows to separate the :term: `Authentication Server ` and the :term: `Resource Server. `
3
+ Django OAuth Toolkit allows to separate the :term: `Authorization Server ` and the :term: `Resource Server `.
4
4
Based on the `RFC 7662 <https://tools.ietf.org/html/rfc7662 >`_ Django OAuth Toolkit provides
5
5
a rfc-compliant introspection endpoint.
6
6
As well the Django OAuth Toolkit allows to verify access tokens by the use of an introspection endpoint.
7
7
8
8
9
9
Setup the Authentication Server
10
10
-------------------------------
11
- Setup the :term: `Authentication Server ` as described in the :ref: ` tutorial `.
11
+ Setup the :term: `Authorization Server ` as described in the :doc: ` tutorial/ tutorial `.
12
12
Create a OAuth2 access token for the :term: `Resource Server ` and add the
13
13
``introspection ``-Scope to the settings.
14
14
@@ -21,7 +21,7 @@ Create a OAuth2 access token for the :term:`Resource Server` and add the
21
21
...
22
22
},
23
23
24
- The :term: `Authentication Server ` will listen for introspection requests.
24
+ The :term: `Authorization Server ` will listen for introspection requests.
25
25
The endpoint is located within the ``oauth2_provider.urls `` as ``/introspect/ ``.
26
26
27
27
Example Request::
@@ -49,10 +49,10 @@ Example Response::
49
49
50
50
Setup the Resource Server
51
51
-------------------------
52
- Setup the :term: `Resource Server ` like the :term: `Authentication Server ` as described in the :ref: ` tutorial `.
52
+ Setup the :term: `Resource Server ` like the :term: `Authorization Server ` as described in the :doc: ` tutorial/ tutorial `.
53
53
Add ``RESOURCE_SERVER_INTROSPECTION_URL `` and **either ** ``RESOURCE_SERVER_AUTH_TOKEN ``
54
54
**or ** ``RESOURCE_SERVER_INTROSPECTION_CREDENTIALS `` as a ``(id,secret) `` tuple to your settings.
55
- The :term: `Resource Server ` will try to verify its requests on the :term: `Authentication Server `.
55
+ The :term: `Resource Server ` will try to verify its requests on the :term: `Authorization Server `.
56
56
57
57
.. code-block :: python
58
58
@@ -66,7 +66,7 @@ The :term:`Resource Server` will try to verify its requests on the :term:`Authen
66
66
67
67
``RESOURCE_SERVER_INTROSPECTION_URL `` defines the introspection endpoint and
68
68
``RESOURCE_SERVER_AUTH_TOKEN `` an authentication token to authenticate against the
69
- :term: `Authentication Server `.
69
+ :term: `Authorization Server `.
70
70
As allowed by RFC 7662, some external OAuth 2.0 servers support HTTP Basic Authentication.
71
71
For these, use:
72
72
``RESOURCE_SERVER_INTROSPECTION_CREDENTIALS=('client_id','client_secret') `` instead
0 commit comments