reading-notes

Project maintained by mr-atta Hosted on GitHub Pages — Theme by mattgraham

Bearer Authorization

Write the following steps in the correct order:

Ask the client if they want to sign in via a third party
Make a request to a third-party API endpoint
Register your application to get a client_id and client_secret
Receive authorization code
Receive access token
Redirect to a third party authentication endpoint
Make a request to the access token endpoint

What can you do with an authorization code? 📁

The only thing you can do with the authorization code is to make a request to get an access token.
The authorization code is a temporary code that the client will exchange for an access token. The code itself is obtained from the authorization server where the user gets a chance to see what the information the client is requesting, and approve or deny the request.

What can you do with an access token? 📁

Access tokens are the thing that applications use to make API requests on behalf of a user.

What’s a benefit of using OAuth instead of your own basic authentication? 📁

It enables apps to obtain limited access (scopes) to a user’s data without giving away a user’s password. It decouples authentication from authorization and supports multiple use cases addressing different device capabilities.