API security
Resource Server
A resource server is the API or protected service that receives and validates access tokens before serving data or actions.
Definition
A resource server is the protected component that exposes data, functions, or transactions to authorized callers. It relies on tokens and policy controls to decide whether a request is acceptable and what operations are allowed for the calling subject.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.