Mastering OAuth 2.0

Reference pages

Use these pages as reference documentation when implementing the implicit grant flow in your application. Adapted from The OAuth 2.0 Authorization Framework specification [RFC 6749].

Overview of the implicit grant flow

Figure 4 from RFC 6749

The steps are as follows:

• A: The client application initiates the flow by sending the user's user-agent to the appropriate authorization endpoint.
• B: The authentication server of the service provider authenticates the resource owner and attempts to gain consent by presenting the user consent form.
• C: Assuming the user grants consent, the authorization server redirects the user back to the client application ...