• Set up access & refresh token APIs on both '/oauth2/token' and on our controller layer such as '/api/v1...', both of which function same.
• Authentication management based on a combination of username, client id, and an extra token (referred to in the source code as App-Token, which receives a unique value from the calling devices).
• Separated UserDetails implementation for Admin and Customer roles.
• Integration with spring-security-oauth2-authorization-server.
• Provision of MySQL DDL, which consists of oauth_access_token, oauth_refresh_tokenand oauth_client_details
• Application of Spring Rest Docs.

https://github.com/Andrew-Kang-G/spring-security-oauth2-password-jpa-implementation