OAuth 2.0 Workflows

Once the client developers have registered the client and acquired the client credentials, they can initiate the OAuth protocol. The workflow of the protocol differs based on the grant type. As discussed earlier, we have four types of grants in OAuth.

We'll look at the workflow for each type in this lesson.

Authorization code grant

The steps followed in this grant type are as follows:

1. Using the authorization endpoint, the client redirects the resource owner to the authorization server. This request contains the redirect URI, desired scopes, and client credentials.

2. The resource owner is asked to decide whether or not to authorize the client's request once the authorization server has ...