I though that the issue is that public client access or bearer only access (not sure now) can't access resource stored in WEB-INF. Hence, the proposal was to create a servlet that would deliver file from WEB-INF and map it to externally visible location. Same approach is already user in linked example.
|