This is definitely the Spring Security you are looking for. It provides a great way to protect the calls of your spring-mvc RESTful controllers.
oAuth works in federated authorization, which is what you need when you create an application that requires your users to grant permission for your application to access some of their personal data that live in the cloud, for example, their gmail contacts or their Google Calendar.
source share