🔥More exclusive content: [ Ссылка ]
Twitter: [ Ссылка ]
Website: [ Ссылка ]
Blog: [ Ссылка ]
00:00 What is the OAuth authorization code flow?
02:54 OAuth authorization code example walkthrough
06:16 exchanging authorization code for an access token
08:38 OAuth CSRF protection with state parameter and PKCE
10:16 OAuth authorization code grant for server side rendered apps
11:15 conclusion
The authorization code flow is a way with which a client ( a third party application) can obtain an access token that provides it limited access to an HTTP service on behalf of a user.
The client initiates the authorization code flow by redirecting the user to the authorization server with client id, state, scopes and a redirect URl as query parameters. There, the user is asked to log into his account and confirm that he wants the third party application to access his account on his behalf. Once approved, the person gets redirected back to the client application with an authorization code in the query parameters. The application can then go and exchange this authorization code for an access token.
If the client is a confidential client, then a client secret is also needed to exchange the authorization code for an access token. Depending on the scopes that the client requested it may also receive a refresh token which allows it get fresh access token in case the current access token has expired.
OAuth Authorization code flow
Теги
oauth authorization code flowoauth authenticationoauth tutorialoauth explainedoauth explanationoauthoauth 2.0 tutorialoauth2oauth2 explainedoauth csrf attackoauth state parameteroauth state vs nonceoauth grant typesoauth grant types explainedoauth in depthoauth in detailoauth authorization code grant type exampleoauth authorization grant flowoauth 2.0 authorization code grant typeauthorization code grant flow oauth2