Mastering Microservices with Java - Third Edition

Implicit grant

There are no authorization code steps involved in the implicit grant flow. It provides the implicit grant for authorization code. Apart from the authorization code step, everything is the same if you compare the implicit grant flow against the authorization code grant flow. Therefore, it is called implicit grant. Let's find out its flow:

1. The client application (for example, Quora) sends the access token request to the resource server (for example, Facebook, Twitter, and so on) with the client ID, redirect URI, and so on.
2. The user may need to authenticate if not already authenticated. On successful authentication and other input validation, the resource server sends the access token.
3. The OAuth client requests the user's (resource ...