Roles and tokens
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
name the four roles and the tokens.
Planned topics
- Resource owner: the user who owns the data.
- Client: the app that wants access.
- Authorization server: logs the user in and issues tokens (for example Keycloak).
- Resource server: the API that accepts tokens (our Shop API).
- Access token: sent to the API. Refresh token: gets new access tokens. Scopes describe what is allowed.
Draft outline details
Demonstration
a four-box diagram with arrows: user → client → authorization server → token → resource server.
Check your understanding
Which role is the Shop API?
Show answer
Resource server.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.