Activate the Vault OAuth resource server

Vault gates OAuth resource server functionality behind an activation flag. Vault returns errors for profile configuration and JWT authentication requests until you activate the oauth-resource-server feature.

$ vault write -f sys/activation-flags/oauth-resource-server/activate

Key            Value
---            -----
activated      [oauth-resource-server]
unactivated    [secrets-import secrets-sync]

$ curl                                        \
    --request PUT                             \
    --header "X-Vault-Token: ${VAULT_TOKEN}"  \
    ${VAULT_ADDR}/v1/sys/activation-flags/oauth-resource-server/activate

Once enabled, Vault acts as an OAuth 2.0 resource server with distinct OAuth server profiles. Each profile tells Vault which issuer to trust, how to verify token signatures, and which claims to enforce.