Glossary: Web App Security and Authentication

Authorization server

Also written: resource server

The authorization server signs users in and issues tokens (Kettle & Crane ID); the resource server is the API that accepts those tokens.