Provides both client- and server-side authorization with a single configuration