spring - Where should I create user in SPA using Oauth2 -


i working on application spring boot backend, want secure oauth2 using implicit flow. front end angular (spa). initial phase have authorization , resource server on same instance, want able seperate later on.

i understand authorization "takes place" on authorization server , token used access resources. how add new user system? should there registration (password reset etc.) endpoint on authorization server or resource server?
makes sense put on authorization server, when add new application uses able add new user system. other point of view authorization server should used authorization, user creation delegated resource server.

usually registration process implemented in resource server, endpoint , similar endpoints retrieving forgotten password, resetting password etc of them lives in resource server, part of logic of application, not part of authorisation itself.


Comments

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

jquery - Responsive Navbar with Sub Navbar -