2016年 9月 19日

OAuth2学习笔记

---

OAuth2定义：

https://tools.ietf.org/html/rfc6749

OAuth2认证流程

Authorization Grant Type

• Authorization Code (“code”)
• Implicit (“token”)
• Resource Owner Password Credentials (“password”)
• Client Credentials (“client_credentials”)
• Extension Grants (grant_type=absolute URI)

Authorization Code Grant 流程

https://tools.ietf.org/html/rfc6749#section-4.1

Implicit Grant 流程

https://tools.ietf.org/html/rfc6749#section-4.2

#### Resource Owner Password Credentials Grant 流程

https://tools.ietf.org/html/rfc6749#section-4.3

#### Client Credentials Grant 流程

https://tools.ietf.org/html/rfc6749#section-4.4