Oauth2 Resource Server (Product API) which can be accessed only after getting the token with respective roles from Authorization Server