title: Spring Security OAuth2 simple configuration
body: <p>I have a simple project that requires the simple following configuration :</p>
  
  <ul>
  <li>I have a "password" grant_type, which means I can submit the username/password (that the user enters in my login form), and get an access_token on success.</li>
  <li>With that access_token, I can request an API and get the user's information.</li>
  </ul>
  
  <p>I know the URIs of the APIs, I don't want anything huge (I saw the configuration on <a href="https://github.com/spring-projects/spring-security-oauth/tree/master/samples">https://github.com/spring-projects/spring-security-oauth/tree/master/samples</a>) and it seems HUGE.</p>
  
  <p>I can think of it this way :</p>
  
  <ul>
  <li>Do a simple HTTP request, giving *client_id* , *client_secret* , *grant_type=password* , <em>username</em> and <em>password</em> (that the user provided).</li>
  <li>I receive an *ACCESS_TOKEN* (and some other stuff) in a JSON response.</li>
  <li>I use the *ACCESS_TOKEN* to query a URL (using simple GET request), that will give the user's information.</li>
  <li>I set the information in HttpSession and consider the user as logged in.</li>
  </ul>
  
  <p>It can be done in 2 HTTP requests. I just don't want to do it this way, but using the "safer" way instead with Spring Security OAuth2.</p>
  
  <p>Can you think of what "simple" config I need to make to have this done?</p>