Oauth2
    (Replacing message template with parser tag)
    No edit summary
     
    (One intermediate revision by one other user not shown)
    Line 2: Line 2:
    ===Client Credentials Grant Flow===
    ===Client Credentials Grant Flow===


    '''Server-to-server authentication''' using Oauth2 and the [https://tools.ietf.org/html/rfc6749#section-4.4 Client credentials grant flow] may be supported using these steps. Other flows may also be supported in a similar flow. User-authentication using Oauth2 and OpendId is described [[Openid AzureAD|here.]]
    '''Server-to-server authentication''' using Oauth2 and the [https://tools.ietf.org/html/rfc6749#section-4.4 Client credentials grant flow] may be supported using these steps. Other flows may also be supported in a similar flow. User-authentication using Oauth2 and OpendId is described [[Documentation:Openid AzureAD|here.]]


    1. Set up the call to obtain the "token" using the client secret, storing the result in transient classes as shown on the right:
    1. Set up the call to obtain the "token" using the client secret, storing the result in transient classes as shown on the right:
    Line 17: Line 17:


    [[File:Oauth2Call.PNG]]
    [[File:Oauth2Call.PNG]]


    '''Please note that even though Oauth2 is standard, the naming conventions of all parameters may differ - these names worked using an Identity Server 4.'''
    '''Please note that even though Oauth2 is standard, the naming conventions of all parameters may differ - these names worked using an Identity Server 4.'''
    [[Category:Authentication]]
    [[Category:Authentication]]
    {{Edited|July|12|2024}}
    {{Edited|July|12|2025}}

    Latest revision as of 05:30, 14 February 2025

    This page was created by Henrik on 2019-03-10. Last edited by Stephanie@mdriven.net on 2025-02-14.

    Client Credentials Grant Flow

    Server-to-server authentication using Oauth2 and the Client credentials grant flow may be supported using these steps. Other flows may also be supported in a similar flow. User-authentication using Oauth2 and OpendId is described here.

    1. Set up the call to obtain the "token" using the client secret, storing the result in transient classes as shown on the right:

    GetTokenOauth2.PNG

    TokenModel.PNG

    2. Set up a server-side ViewModel to refresh the token before expiry, using criterias (as an example) as shown below.

    OauthSSCriteria.PNG

    2. Pass the "token" in all subsequent calls:

    Oauth2Call.PNG

    Please note that even though Oauth2 is standard, the naming conventions of all parameters may differ - these names worked using an Identity Server 4.

    Retrieved from "https://learn.mdriven.net/index.php?title=Documentation:Oauth2&oldid=26455"

    © MDRIVEN . All Rights Reserved

    API Docs
    MDriven World | Portal | Blog | YouTube | StackOverflow | Facebook

    © MDRIVEN . All Rights Reserved