title: Not getting Client Authority/Role while using RemoteTokenService
body: <p>I am using Spring-Security-OAuth2 for implementing my own oauth server and resource server. I am using <code>RemoteTokenService</code> as my <code>ResourceServerTokenService</code> on my ResourceServer which will authenticate any accessToken using the <code>CheckTokenEndpoint</code> (/oauth/check_token) on OAuth Server.</p>
  
  <p>I have added a antMatcher for an api url e.g. /data/list which will need client application Role / Authority: "<strong>ROLE_ADMIN</strong>" like this <code>.antMatcher('/data/list').access("#oauth2.clientHasRole('ROLE_ADMIN')")</code></p>
  
  <p>but it is not working.
  I have done some trial and error on this end point and what I get is following :::</p>
  
  <p>When oauth grant is client only i.e. client_credential grant.
  what we get from /oauth/check_token </p>
  
  <pre><code>{
   "scope":["read"],
   "exp":1412955393,
   "client_id":"sample_test_client_app"
  }
  </code></pre>
  
  <p>we dont get any client authority. so how can spring security will perform above authorization check of <code>"#oauth2.clientHasRole('ROLE_ADMIN')"</code></p>
  
  <p>When oauth grant is user + client i.e. Authorization_code grant
  what we get from /oauth/check_token </p>
  
  <pre><code>{
   "aud":["resource_id"],
   "exp":1412957540,
   "user_name":"developer",
   "authorities":["ROLE_USER"],
   "client_id":"sample_test_client_app",
   "scope":["read"]
  }
  </code></pre>
  
  <p>and for authorization_code grnat we are still not getting client authority/role. so can any one tell me how can we perform clientHasRole authentication on any api url?</p>