oAuth2 need clarification regarding the tokens

Hi Guys,

I am building Oauth2 Flow for one of our product. Here I am answering all the above questions. May be it is helpful for others

Ans 1. Resource server stores the security key which is a part of JWT token. Once the request with token received it is decoded and validated.

Ans 2. Yes we can store the tokens in authorization server.

Ans 3. Tokens itself contains lot of information and resource server validate it through Security code

-1

Very nice explantion on AES 256 encryption

https://www.codeproject.com/Articles/769741/Csharp-AES-bits-Encryption-Library-with-Salt

-1

I found this video which is quite helpful in understanding oAuth2 flow. Please have a look on the below video,

https://www.youtube.com/watch?v=vlrK3YZ_Fj0&feature=youtu.be

-1