客户机获得授权和布局之后，就可以直接从数据服务器访问信息。
When authorized and given the layout, the client is free to access information from the data servers directly.
拦截器决定是否对发出请求的客户机进行授权，使它访问所请求的资源。
The interceptor decides whether the requesting client is authorized to access the requested resource.
所以在用户返回并使用我们的客户端时无需再次授权访问。
Therefore there is no need to grant access again if a returned user uses our client.
在这个小节，您将为折扣优惠方案客户使用的POST、PUT和DELETE方法提供安全保护，因为他们已被授权访问提供商的应用程序。
In this section you secure the POST, PUT, and DELETE methods for incentives to people who are authorized to access the provider application.
授权过程后，客户端收到一个访问令牌。
After the authorization process, the client receives an access token.
匿名访问(UnauthenticatedAccess)——对于所有连接模式，服务可以选择Relay提供的“不经过客户授权”选项并允许匿名访问。
Unauthenticated access - For all connection modes, services can opt out of the client authorization facility provided by the Relay and allow unauthenticated client access.
此Subject可以用于对客户机访问进行授权。
该操作将允许用户和用户组与业务流程交互，从而得到授权以访问Process ChoreographerWeb客户端。
This operation will allow users and user groups defined to interact with some business processes, to be authorized to access the process Choreographer Web client.
如果不能通过shell访问，可以通过更正规的FTP客户端更改文件授权。
If you do not have shell access, you can change file permissions with most decent FTP clients.
通常具有内嵌的安全性特征，保护客户数据拒绝未授权访问。
It usually has built-in security features that help protect against unauthorized access to customer data.
设置细颗粒度的授权和角色访问控制，惠普保护系统减少了配置时间和客户所需的技能水平要求。
By setting up fine-grained privileges and role-based access control HP protected systems reduces configuration time and required customer skill level.
在与客户的访问令牌访问权限有关联范围，它定义了访问授权的客户拥有资源所有者的程度（用户的）资源。
The access permissions associated with the client's access token have a scope, which defines the degree of access authorization the client has for the resource owner's (the end user's) resources.
访问授权在各客户中被指派。无论在哪工作，都必须在客户中为每一个用户建立用户主记录。
Access authorization is assigned per client. You must create a user master record for each user in the client where he or she wishes to work.
至此，已经完成客户端对自定义授权与重置密码的数据访问层逻辑。现在看看客户端。
So far, we have finished examining the server-side data access layer logic for custom authentication and reset password. We will switch to the client side next.
该类通常用于检索当前声明集以便在访问方法时对客户端进行授权。
A common use of the class is to retrieve the current set of claims for the purpose of authorizing a client when accessing a method.
我给出的一个要求是，这个API只能由授权的客户端访问。
One of the requirements I was given is that this API should only be accessible by authorized clients.
我可以返回客户机的访问令牌，用它来计算每个请求前授权头吗？
Could I return the access token to the client and have use it to calculate an Authorization header before each request?
我可以返回客户机的访问令牌，用它来计算每个请求前授权头吗？
Could I return the access token to the client and have use it to calculate an Authorization header before each request?
应用推荐