Resource Server Configurer

So far, this is a draft on what may be the Resource Server
Configuration DSL. Feedback is welcome!

Issue: spring-projects/spring-security#5226

Author: jzheaux

oauth2/oauth2-resource-server/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/resourceserver/OAuth2ResourceServerConfigurer.java

@@ -0,0 +1,140 @@
+package org.springframework.security.config.annotation.web.configurers.oauth2.resourceserver;
+
+import org.springframework.security.config.annotation.web.HttpSecurityBuilder;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.oauth2.jose.jws.JwsAlgorithms;
+import org.springframework.security.oauth2.jwt.JwtDecoder;
+import org.springframework.security.oauth2.jwt.JwtVerifier;
+
+import javax.crypto.SecretKey;
+import java.security.PublicKey;
+import java.time.Duration;
+import java.time.temporal.ChronoUnit;
+
+public class OAuth2ResourceServerConfigurer<B extends HttpSecurityBuilder<B>> extends
+		AbstractHttpConfigurer<JwtVerifierConfigurer<B>, B> {
+
+	public BearerConfigurer bearer() {}
+
+	public class BearerConfigurer {
+		public BearerConfigurer inBody() {}
+
+		public BearerConfigurer inHeader() {}
+
+		public BearerConfigurer inQuery() {}
+
+		public OAuth2ResourceServerConfigurer<B> and() {}
+	}
+
+
+
+	public JwtConfigurer jwt() {}
+
+	public class JwtConfigurer {
+		public JwtDecoderConfigurer decoder() {}
+
+		public JwtConfigurer decoder(JwtDecoder jwtDecoder) {}
+
+		public JwtVerifierConfigurer verifier() {}
+
+		public JwtVerifier verifier(JwtVerifier jwtVerifier) {}
+
+		public OAuth2ResourceServerConfigurer<B> and() {}
+	}
+
+	public class JwtDecoderConfigurer {
+		public JwtDecoderConfigurer rs256() {}
+
+		public JwtDecoderConfigurer algorithm(JwsAlgorithms algorithm) {}
+
+		public JwkSetConfigurer jwkSet() {}
+
+		public JwtConfigurer and() {}
+	}
+
+	public class JwtVerifierConfigurer {
+		public AudiencesConfigurer audiences() {}
+
+		public IssuersConfigurer issuers() {}
+
+		public JwtVerifierConfigurer clockSkew(Integer skew, ChronoUnit unit) {}
+
+		public JwtVerifierConfigurer clockSkew(Duration skew) {}
+
+		public JwtVerifierConfigurer additional(JwtVerifier verifier) {}
+
+		public JwtConfigurer and() {}
+	}
+
+	public class AudiencesConfigurer {
+		public AudiencesConfigurer audience() {}
+
+		public JwtVerifierConfigurer and() {}
+	}
+
+	public class IssuersConfigurer {
+		public IssuersConfigurer issuer() {}
+
+		public JwtVerifierConfigurer and() {}
+	}
+
+	public class JwkSetConfigurer {
+		public RemoteJwkSetConfigurer remote(String location) {}
+
+		public LocalKeystoreJwkSetConfigurer keystore(String location) {}
+
+		public JwkSetConfigurer key(String location) {}
+
+		public JwkSetConfigurer key(PublicKey key) {}
+
+		public JwkSetConfigurer key(SecretKey key) {}
+
+		public JwtDecoderConfigurer and() {}
+	}
+
+	public class RemoteJwkSetConfigurer {
+		public RemoteJwkSetConfigurer connectionTimeout(Integer timeout, ChronoUnit unit) {}
+
+		public RemoteJwkSetConfigurer connectionTimeout(Duration timeout) {}
+
+		public RemoteJwkSetConfigurer readTimeout(Integer timeout, ChronoUnit unit) {}
+
+		public RemoteJwkSetConfigurer readTimeout(Duration timeout) {}
+
+		public JwtDecoderConfigurer and() {}
+	}
+
+	public class LocalKeystoreJwkSetConfigurer {
+		public LocalKeystoreJwkSetConfigurer password(String keystorePassword) {}
+
+		public LocalKeyJwkSetConfigurer alias(String alias) {}
+	}
+
+	public class LocalKeyJwkSetConfigurer {
+		public LocalKeyJwkSetConfigurer password(String password) {}
+
+		public JwtDecoderConfigurer and() {}
+	}
+
+
+
+	public OpaqueConfigurer opaque() {}
+
+	public class OpaqueConfigurer {
+		public TokenEndpointConfigurer tokenEndpoint(String location) {}
+
+		public OAuth2ResourceServerConfigurer<B> and() {}
+	}
+
+	public class TokenEndpointConfigurer {
+		public TokenEndpointConfigurer connectionTimeout(Integer timeout, ChronoUnit unit) {}
+
+		public TokenEndpointConfigurer connectionTimeout(Duration timeout) {}
+
+		public TokenEndpointConfigurer readTimeout(Integer timeout, ChronoUnit unit) {}
+
+		public TokenEndpointConfigurer readTimeout(Duration timeout) {}
+
+		public OpaqueConfigurer and() {}
+	}
+}