November 2017
Intermediate to advanced
542 pages
14h 24m
English
The implicit grant type, defined in RFC 6749, Section 4.1 (https://tools.ietf.org/html/rfc6749), is similar to the authorization code grant type, but the client application receives access_token directly, without the need for authorization_code. This happens because the client application, which is usually a JavaScript application running within a browser and is less trusted than a client application running on the server, cannot be trusted with client_secret (which is required in the authorization code grant type). The implicit grant type does not send a refresh token to the application due to limited trust.
Read now
Unlock full access