Authorization Server

tags :

In OAuth2 #

ref

• At its core, an authorization server is simply an engine for minting OpenID Connect or OAuth2 tokens.
• An authorization server is also used to apply access policies.
• Each authorization server has a unique issuer URI and its own signing key for tokens to keep a proper boundary between Security domains.