11Separate Resource Server
22========================
3- Django OAuth Toolkit allows to separate the :term: `Authentication Server ` and the :term: `Resource Server. `
3+ Django OAuth Toolkit allows to separate the :term: `Authorization Server ` and the :term: `Resource Server `.
44Based on the `RFC 7662 <https://tools.ietf.org/html/rfc7662 >`_ Django OAuth Toolkit provides
55a rfc-compliant introspection endpoint.
66As well the Django OAuth Toolkit allows to verify access tokens by the use of an introspection endpoint.
77
88
99Setup the Authentication Server
1010-------------------------------
11- Setup the :term: `Authentication Server ` as described in the :ref: ` tutorial `.
11+ Setup the :term: `Authorization Server ` as described in the :doc: ` tutorial/ tutorial `.
1212Create a OAuth2 access token for the :term: `Resource Server ` and add the
1313``introspection ``-Scope to the settings.
1414
@@ -21,7 +21,7 @@ Create a OAuth2 access token for the :term:`Resource Server` and add the
2121 ...
2222 },
2323
24- The :term: `Authentication Server ` will listen for introspection requests.
24+ The :term: `Authorization Server ` will listen for introspection requests.
2525The endpoint is located within the ``oauth2_provider.urls `` as ``/introspect/ ``.
2626
2727Example Request::
@@ -49,10 +49,10 @@ Example Response::
4949
5050Setup the Resource Server
5151-------------------------
52- Setup the :term: `Resource Server ` like the :term: `Authentication Server ` as described in the :ref: ` tutorial `.
52+ Setup the :term: `Resource Server ` like the :term: `Authorization Server ` as described in the :doc: ` tutorial/ tutorial `.
5353Add ``RESOURCE_SERVER_INTROSPECTION_URL `` and **either ** ``RESOURCE_SERVER_AUTH_TOKEN ``
5454**or ** ``RESOURCE_SERVER_INTROSPECTION_CREDENTIALS `` as a ``(id,secret) `` tuple to your settings.
55- The :term: `Resource Server ` will try to verify its requests on the :term: `Authentication Server `.
55+ The :term: `Resource Server ` will try to verify its requests on the :term: `Authorization Server `.
5656
5757.. code-block :: python
5858
@@ -66,7 +66,7 @@ The :term:`Resource Server` will try to verify its requests on the :term:`Authen
6666
6767 ``RESOURCE_SERVER_INTROSPECTION_URL `` defines the introspection endpoint and
6868``RESOURCE_SERVER_AUTH_TOKEN `` an authentication token to authenticate against the
69- :term: `Authentication Server `.
69+ :term: `Authorization Server `.
7070As allowed by RFC 7662, some external OAuth 2.0 servers support HTTP Basic Authentication.
7171For these, use:
7272``RESOURCE_SERVER_INTROSPECTION_CREDENTIALS=('client_id','client_secret') `` instead
0 commit comments