oauth externally
Oracle 19C
We are currently integrating an externally protected resource.
We have an ORDS client that obtains a token in the normal way and sends the request to
the externally protected resource with the token obtained from ORDS.
How can this external resource validate the ORDS token?
Using the standardised OAuth client_credentials or authorization_code
flow we are expecting to give them a value for the following properties:
jwk-set-uri: where to get info on the token specs
issuer-uri: where to get info on the token issuer authority
Is is possible in a standard Oracle way to EXTERNALLY validate tokens generated by Oracle ORDS stack?