HttpHeaders httpHeaders = new HttpHeadersImpl(message);
String header = httpHeaders.getRequestHeaders().getFirst("Authorization");
// if the authorization token has Bearer..
if (header.startsWith("Bearer ")) {
String accessToken = header.substring(7).trim();
respDTO = validationServiceClient.validateAuthenticationRequest(accessToken); //TODO : send scope params
boolean valid = respDTO.getValid();
if (!valid) {
// authorization failure..
return Response.status(Response.Status.FORBIDDEN).build();
}