OAuth2 with multi-factor authentication A custom grant type implementation for OTP which is sent to the mobile phone of the authenticated user. Used Spring Security OAuth Boot 2 Autoconfig Flow diagram Sample requests