I have a client how asks a token from an auth server in order to use it to an endpoint which serves as the resource server.
Between the client and the server, a handshake is utilized in order the two parties authenticate with each other.
In the normal TLS handshake procedure, the client sents a symmetric key to the server
In my case does this is necessary? Or after the authentication part has completed the handshake can be finished?