November 2017
Intermediate to advanced
542 pages
14h 24m
English
The authorization code grant type, defined in RFC 6749, Section 4.1 (https://tools.ietf.org/html/rfc6749), is a redirection-based flow where the browser receives an authorization code from anauthorization server and sends this to the client. The client will then interact with the authorization server and exchange the authorization code for access_token and, optionally, id_token and refresh_token. The client can now use this access_token to call the protected resource on behalf of the user.
Read now
Unlock full access