title: OAuth2.0 "No Flow" server on Restlet
body: <p>Man, what a nightmare!</p>
  
  <p>Can anybody PLEASE point me in the direction of any kind of a proper tutorial or example of how to implement an OAuth2.0 server on Restlet (2.2 or 2.1.1).  The only thing resembling a tutorial that I managed to find is <a href="http://web.archive.org/liveweb/http://web.archive.org/web/20120204015421/http://wiki.restlet.org/docs_2.1/13-restlet/28-restlet/392-restlet.html" rel="nofollow">this one here</a>, but don't get too excited just yet, because it seems that the code in the framework is being changed more frequently than this tutorial is being updated.</p>
  
  <p>Aside from the above mentioned article, there seems to be a near complete absence of any useful search results on this matter on Google.  Surely someone out there must have got this right and is using OAuth2.0 on Restlet?</p>
  
  <p>I did in fact manage to get my OAuth2.0 server as far as to return an access token to me (after spending hours analyzing the source code of the <em>AccessTokenResource.java</em> file), but it seems that it is only validating the <em>client id</em> and not the <em>client secret</em>.  Assuming I can sort that out, I am still faced with the task of actually protecting the resources (which should be the job of the <em>OAuthAuthorizer</em>, but that appears to no longer even be present after 2.1.1).</p>
  
  <p>Any help would be greatly appreciated!!</p>