Skip to content

Commit

Permalink
Corrections to glossary terms and documentation links. (#1136)
Browse files Browse the repository at this point in the history
  • Loading branch information
n2ygk authored Apr 24, 2022
1 parent e506fce commit ec34fe9
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions docs/resource_server.rst
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
Separate Resource Server
========================
Django OAuth Toolkit allows to separate the :term:`Authentication Server` and the :term:`Resource Server.`
Django OAuth Toolkit allows to separate the :term:`Authorization Server` and the :term:`Resource Server`.
Based on the `RFC 7662 <https://tools.ietf.org/html/rfc7662>`_ Django OAuth Toolkit provides
a rfc-compliant introspection endpoint.
As well the Django OAuth Toolkit allows to verify access tokens by the use of an introspection endpoint.


Setup the Authentication Server
-------------------------------
Setup the :term:`Authentication Server` as described in the :ref:`tutorial`.
Setup the :term:`Authorization Server` as described in the :doc:`tutorial/tutorial`.
Create a OAuth2 access token for the :term:`Resource Server` and add the
``introspection``-Scope to the settings.

Expand All @@ -21,7 +21,7 @@ Create a OAuth2 access token for the :term:`Resource Server` and add the
...
},
The :term:`Authentication Server` will listen for introspection requests.
The :term:`Authorization Server` will listen for introspection requests.
The endpoint is located within the ``oauth2_provider.urls`` as ``/introspect/``.

Example Request::
Expand Down Expand Up @@ -49,10 +49,10 @@ Example Response::

Setup the Resource Server
-------------------------
Setup the :term:`Resource Server` like the :term:`Authentication Server` as described in the :ref:`tutorial`.
Setup the :term:`Resource Server` like the :term:`Authorization Server` as described in the :doc:`tutorial/tutorial`.
Add ``RESOURCE_SERVER_INTROSPECTION_URL`` and **either** ``RESOURCE_SERVER_AUTH_TOKEN``
**or** ``RESOURCE_SERVER_INTROSPECTION_CREDENTIALS`` as a ``(id,secret)`` tuple to your settings.
The :term:`Resource Server` will try to verify its requests on the :term:`Authentication Server`.
The :term:`Resource Server` will try to verify its requests on the :term:`Authorization Server`.

.. code-block:: python
Expand All @@ -66,7 +66,7 @@ The :term:`Resource Server` will try to verify its requests on the :term:`Authen
``RESOURCE_SERVER_INTROSPECTION_URL`` defines the introspection endpoint and
``RESOURCE_SERVER_AUTH_TOKEN`` an authentication token to authenticate against the
:term:`Authentication Server`.
:term:`Authorization Server`.
As allowed by RFC 7662, some external OAuth 2.0 servers support HTTP Basic Authentication.
For these, use:
``RESOURCE_SERVER_INTROSPECTION_CREDENTIALS=('client_id','client_secret')`` instead
Expand Down

0 comments on commit ec34fe9

Please sign in to comment.