view release on metacpan or  search on metacpan

examples/README.md  view on Meta::CPAN

# OAuth2 resource-server example

A minimal Catalyst app that protects a single endpoint, `/api/whoami`, with
`Catalyst::Plugin::OAuth2::ResourceServer`. The client is self-contained: it
mints its own demo bearer token with `Crypt::JWT` (HS256, using the same
signing key configured in the app), so no separate authorization server is
needed to try this out.

It calls `/api/whoami` three times to show the three outcomes the resource
server distinguishes:

1. **valid token**, a JWT signed with the app's `signing_key`. Verified and
   accepted: `200` with the resolved subject and scopes.