This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Access Token
Access Token

Version management

Difference between version and

At line 1 added 71 lines
!!! Overview
[{$pagename}] is a [token] that is involved in [Access]
!! [OAuth 2.0] [{$pagename}]
In [OAuth 2.0], [{$pagename}] is a [Token] issued to the [OAuth Client] by the [Authorization Server].
[{$pagename}] is used as a [credential] for the [OAuth Client] when attempting [access] to a [Resource Server]
The [Resource Owner] involved in [authorization] decision and grants [Permissions] (via [OAuth Scopes]).
* [{$pagename}] has a [Expiration Date], Usually Time limited, but large time.
* [{$pagename}] [MAY] be revoked by [Resource Owner] actions
* [{$pagename}] Contains [Authorized|Authorizations] via [OAuth Scopes]
* [{$pagename}] in [OAuth 2.0] the [Access Token Type] is __MAY NOT__ be specified and then it is a [Bearer Token]).
The [OAuth 2.0 Audience Information] add an additional "audience" parameter to the [{$pagename}]
You maybe wondering [Why Access Tokens]?
!! Contents
[{$pagename}] in [OAuth 2.0] the type is not specified other than that the [{$pagename}] is a [Bearer Token].
[{$pagename}] is returned from an in an [Authorization Response] as:
{{{
HTTP/1.1 200 OK
Content-Type: application/json;charset=UTF-8
Cache-Control: no-store
Pragma: no-cache
{
"access_token":"mF_9.B5f-4.1JqM",
"token_type":"Bearer",
"expires_in":3600,
"refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA"
}
}}}
[{$pagename}] in [OpenID Connect] is specified as a [JSON Web Tokens] the type ([typ]) is specified in the [{$pagename}]
%%prettify
{{{
{
"alg": "RS256",
"typ": "JWT"
}
.
{
"iss": "https://example.auth0.com/",
"aud": "https://api.example.com/calandar/v1/",
"sub": "usr_123",
"scope": "read write",
"iat": 1458785796,
"exp": 1458872196
}
}}} /%
[Access Token Validation] describes how [Validation] SHOULD be performed.
!! [OAuth Confidential Client], [OAuth Public Client] and [access Token]
[OAuth Confidential Client] [authenticate] to the [Token_endpoint]. and not the [Authorization_endpoint] where as [OAuth Public Clients] obtain [{$pagename}] form the [Authorization_endpoint].
!! [OAuth Parameters Registry] for [{$pagename}]
* access_token - [OAuth Parameters Registry]
* urn:ietf:params:oauth:token-type:access_token - [Internet Draft] [OAuth 2.0 Token Exchange]
!! [MSFT Access Token]
[MSFT Access Token] is a [{$pagename}] used in [Microsoft Windows]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop