This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 234 lines
!!! Overview
[{$pagename}] is a process following the [OAuth Token Request] where [Authorization Server]:
* [authenticates] the [OAuth Client]
* validates the [Authorization Code]
* ensures that the [Redirect_uri] received matches the [URI] used to redirect the [OAuth Client] in step (C).
If validation is successful, the [Authorization Server] responds to the [OAuth Client] with a response with the following parameters as described in Section 4.1.4 of OAuth 2.0 [RFC 6749]. The response [SHOULD] be encoded using UTF-8 [RFC 3629].
* [access_token] - [REQUIRED] - Access Token for the UserInfo Endpoint.
* [token_type] - [REQUIRED] - OAuth 2.0 Token Type value. The value [MUST] be [Bearer], as specified in OAuth 2.0 Bearer Token Usage [RFC 6750], for Clients using this subset.
* [id_token] - [REQUIRED](assuming it is a [OpenID Connect] ) - ID Token.
* expires_in - [OPTIONAL] - [Expiration Time|Expiration Date] of the [access_token] in [seconds] since the [{$pagename}] was generated.
* [refresh_token] - [OPTIONAL] - Refresh Token
The [OAuth Client] can then use the [access_token] to access [protected Resources] at [Resource Servers].
The following is a non-normative example (with line wraps for the display purposes only):
%%prettify
{{{
HTTP/1.1 200 OK
Content-Type: application/json
Cache-Control: no-cache, no-store
Pragma: no-cache
{
"access_token":"SlAV32hkKG",
"token_type":"Bearer",
"expires_in":3600,
"refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA",
"id_token":"eyJ0 ... NiJ9.eyJ1c ... I6IjIifX0.DeWt4Qu ... ZXso"
}
}}}
/%
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [2.1.6.2. Client Receives Tokens|https://openid.net/specs/openid-connect-basic-1_0.html#TokenOK|target='_blank'] - based on information obtained 2018-02-19-