I\'ve derived OAuthAuthorizationServerProvider in order to validate both clients and resource owners.
When I validate resource owners I find their credentials aren\