This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Authorization Code
Authorization Code

Version management

Difference between version and

At line 1 added 29 lines
!!! Overview
[{$pagename}] (code) is a [response_type] value used within the [Authorization Request] to select the following [Grant Types] of [Authorization Code Flow]
The [Authorization Server] creates an [{$pagename}] and sends it to the [OAuth Client] ([OAuth Confidential Clients]) only after successful [Authentication Request] and [Authorization Server Request End-User Consent-Authorization] of the [Resource Owner].
[{$pagename}] is a [Sender Constrained Token] (For use by the [OAuth Client]).
[OAuth Client] presents the [{$pagename}] to the [Token_endpoint] on the [Authorization Server] to obtain an [Access Token].
The validity of the [{$pagename}] is limited to a few minutes as the [OAuth Client] is expected to obtain and [Access Token].
!! [OAuth 2.0] [Grant_type]
[{$pagename}] ("code") is an [OAuth 2.0] [Authorization Grant] which is obtained by using an [Authorization Server] as an intermediary between the [OAuth Client] and the [Resource Owner].
Instead of requesting [Authorization] directly from the [Resource Owner], the [OAuth Client] directs the [Resource Owner] to an [Authorization Server], via its [user-agent] as defined in [RFC 2616], which in turn directs the [Resource Owner] back to the [OAuth Client] with the [{$pagename}].
Before directing the [Resource Owner] back to the [OAuth Client] with the [{$pagename}], the [Authorization Server] [Authenticates] the [Resource Owner] and obtains [authorization|Authorization Request].
Because the [Resource Owner] only [Authenticates] with the [Authorization Server], the [Resource Owner]'s [credentials] are never shared with the [OAuth Client].
The [{$pagename}] provides a few important security benefits, such as the ability to [authenticate] the [OAuth Client], as well as the transmission of the [Access Token] directly to the [OAuth Client] without passing it through the [Resource Owner]'s [user-agent] and potentially exposing it to others, including the [Resource Owner].
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop