I have a client application X that wants to access resource server Y (both under my control). Resource server Y needs to know that a request has been authorized by the resou
