Spring 5.0 Projects

Authorization code

Being the most commonly and widely used, the authorization code grant is the best fit for server-side applications. The Client would be a web application. To make sure that the Client interacts with the Authorization Server properly, it is required to configure certain connection parameters, like the Client ID and Client Secret, with the Client. Since the Client is a web application, these parameters can be maintained secretly. 

In this grant type, a Client must be able to collaborate with a User Agent (Browser), because the authorization code is routed through the browser. The process of obtaining an access token for an authorization code grant can be described with the following diagram. Since the Resource Owner is authenticated ...