Linked Questions
12 questions linked to/from What is the purpose of the implicit grant authorization type in OAuth 2?
291
votes
7answers
60k views
Why is there an “Authorization Code” flow in OAuth2 when “Implicit” flow works so well?
With the "Implicit" flow the client (likely a browser) will get a access token, after the Resource Owner (i.e. the user) gave access.
With the "Authorization Code" flow however, the client (usually ...
174
votes
9answers
53k views
What is the difference between the OAuth Authorization Code and Implicit workflows? When to use each one?
OAuth 2.0 has multiple workflows. I have a few questions regarding the two.
Authorization code flow - User logs in from client app, authorization server returns an authorization code to the app. The ...
70
votes
11answers
38k views
Facebook OAuth 2.0 “code” and “token”
Why do you need both a "code" and a "token" in the Facebook OAuth2 authentication flow as described here: https://developers.facebook.com/docs/authentication/ ?
If you look at the OAuth dialog ...
47
votes
2answers
30k views
What does “offline” access in OAuth mean?
What exactly does the word "offline" mean with regard to the offline access granted by an OAuth server?
Does it mean that the resource server will return data about the user even when the user is ...
24
votes
2answers
8k views
When should the server-side vs. client-side Facebook authentication flows be used?
Facebook has two flows for Authentication, client-side and server-side. When should each one be used?
Facebook docs: https://developers.facebook.com/docs/authentication/
Possibly related: What is ...
6
votes
2answers
3k views
How to access Bitbucket API from a Java Desktop App via Jersey+Oltu?
As the title states it, I want to access the bitbucket API from a native Java Desktop Application. Bitbucket requires Applications to use OAuth2, and for that I found that Oltu should do the job.
...
3
votes
1answer
2k views
Handle OAuth 2.0 Authentication - Get token redirect token response in ASP.NET MVC application
I recently started fiddling with OneDrive API which uses OAuth 2.0 authentication / authorization flow.
OneDrive API OAuth 2.0
I am trying to follow along the Token Flow to get access token using an ...
10
votes
1answer
1k views
How to connect to the Paypal API through Javascript using OAuth?
I want to make a small app that gets some account information from Paypal and shows that in a HTML page. I solely use HTML/CSS and Javascript, I dislike to run the authorization flow on the server for ...
3
votes
2answers
621 views
OAuth2 process and best practices for private apps
Please bear with me while I explain my problem and the solutions/guides I have found.
Description: In my company, we have one product that have multiple modules. Each module is its separate backend ...
1
vote
1answer
667 views
Mixing authorization code and implicit grant type in OAuth2
I have some questions for the following flow involving OAuth2:
webapp1.xyz.com is a registered client with authorization code grant type, here's the current flow:
User logged in and redirected with ...
1
vote
1answer
1k views
Oauth2 and Access Token in SharePoint App
I am creating an intranet on SharePoint - O365 where I can a widget where I need to pull calendar events and display them for a week. Here is a steps walk through:
a. User log in to Intranet
b. ...
0
votes
1answer
87 views
Securing Service to Service OAuth authentication
I have an azure AD tenant and several App registrations. Using postman I use one app registrations client id and secret to access other applications like so:
POST /__TENANTID__/oauth2/token HTTP/1.1
...