OAuth2 Provider.xml

  <oauth2-provider:config 
		host="0.0.0.0" 
		port="8081" 
		name="oauth2-provider" 
		accessTokenEndpointPath="access-token" 
		scopes="READ WRITE" 
		resourceOwnerSecurityProvider-ref="security-provider" 
		supportedGrantTypes="IMPLICIT RESOURCE_OWNER_PASSWORD_CREDENTIALS" 
		tokenTtlSeconds="300" 
		enableRefreshToken="true" 
		authorizationEndpointPath="authorization-code"
		loginPage="login.html"
		connector-ref="httpsConnector" 
		doc:name="OAuth provider module">
		<oauth2-provider:clients>
			<oauth2-provider:client clientId="customer-web-app" type="PUBLIC" clientName="Web UI" description="Javascript web UI">
				<oauth2-provider:authorized-grant-types>
					<oauth2-provider:authorized-grant-type>PASSWORD</oauth2-provider:authorized-grant-type>
				</oauth2-provider:authorized-grant-types>
				<oauth2-provider:scopes>
					<oauth2-provider:scope>READ</oauth2-provider:scope>
				</oauth2-provider:scopes>
			</oauth2-provider:client>
			<oauth2-provider:client clientId="admin-web-app" type="PUBLIC" clientName="Private Web UI" description="Javascript web UI">
				<oauth2-provider:authorized-grant-types>
					<oauth2-provider:authorized-grant-type>PASSWORD</oauth2-provider:authorized-grant-type>
					<oauth2-provider:authorized-grant-type>REFRESH_TOKEN</oauth2-provider:authorized-grant-type>
				</oauth2-provider:authorized-grant-types>
				<oauth2-provider:scopes>
					<oauth2-provider:scope>READ</oauth2-provider:scope>
					<oauth2-provider:scope>WRITE</oauth2-provider:scope>
				</oauth2-provider:scopes>
			</oauth2-provider:client>
		</oauth2-provider:clients>
	</oauth2-provider:config>