title: Spring Security JWT and Oauth2
body: <p>I'd like to setup a central authentication / authorization server using Spring Security from where I could fetch JWT token which I could then use for accessing restricted resources on another Spring Security backed up REST server.</p>
  
  <p>Here's my flow:</p>
  
  <p>1) HTML JS / Mobile etc client authenticates on auth server to get the JWT token
  2) Client sends this token in HTTP header to REST server to gain access to secured resources</p>
  
  <p>I thought JWT would suite best for this scenario because it can contain all the relevant data and REST server could be fully stateless and simply decode the token to get all necessary data (role, clientid, email...) on REST server.</p>
  
  <p>Is Oauth2 right choice for this and if so could someone kindly point me to right direction? If JWT isn't the right bet, I'm open to other solutions :) I should mention that in my case it's also possible to load client information from database also on REST server, but it should not be responsible for authenticating the user (meaning no username/password check, just the token decoding/validating...)</p>