https://www.ietf.org/archive/id/draft-ietf-oauth-browser-based-apps-15.html#name-token-mediating-backend

spring data jpa 最佳方式

https://vladmihalcea.com/spring-data-jpa-specification/#more-26869