Optional servlet-only OAuth2/OIDC Authorization Server (Spring Authorization Server) with JWKS sourced from the framework KeyManagementPort. Deployed separately from reactive resource servers.
 | The Definitive Guide to Security in Jakarta EE: Securing Java-based Enterprise Applications with Jakarta Security, Authorization, Authentication and More (2022) by Tijms, Arjan, Bais, Teo, Keil, Werner |
 | Mastering Secure Java Applications: Navigating security in cloud and microservices for Java (English Edition) (2024) by Chawdhury, Tarun Kumar, Banerjee, Joyanta, Gupta, Vipul, Poddar, Debopam |
 | Penetration Testing with Java: A step-by-step pen testing handbook for Java applications (English Edition) (2025) by Snoke, Nancy |
 | Java Security (2nd Edition) (2001) by Oaks, Scott |