Within Oauth, what component validates the user's identity?
authorization server
client
resource server
not specified