oAuth2-Roles

Just The Basics

Just The Basics-Image From Medium.com

  • Resource Server
     The resource server can be considered as a web server which would host a collection of resources and protect them using OAuth2 protocol.
  • Resource Owner
    The resource owner would be the user who owns the resources hosted on the resource server.
  • Client
    This would the client application which would provide access to the resources hosted on the resource server on behalf of the resource owner with authorization.
  • Authorization Server
     The authorization server would issue access tokens to the client after successfully authenticating the resource owner and obtaining authorization. In some scenarios, resource server would also act as the authorization server.
  • References:
  • https://medium.com/scalable/an-oauth2-grant-selection-decision-tree-for-securing-rest-apis-d63b5c0c8900

Comments

Post a Comment

Popular posts from this blog

AgendaAndAudience

Image
This is what we will be doing in the next 4 posts. i will include this diagram more than once. O-Auth2-Authorization Code Grant The below series of posts is useful for, Micro-services Developers. Dev/Sys Specialists. towards, How oAuth2 Grant Selection works by example. How Auth providers make things easy. It is NOT, a guide book of oAuth2. about grant selection. Some Pre-requisites before you jump in, Basic node js. Basic web development. The first series of posts are about oAuth2, Let's get started. Next-->
Read more

oAuth2-AuthorizationCodeGrant

Image
oAuth2-Authorization Code Grant. What we will do, 1. Implement the above functionality in node js. 2. Wire an auth provider. In Brief, 1. oAuth2 is a protocol defined for inter-operable authorization grant mechanisms. 2. It identifies 4 broad scenarios and a suitable grant mechanism for each. 3. Based on inter-operable grant mechanism many Auth providers provide the functionality as service. 4. Auth0 is one such provider. Resources : https://medium.com/scalable/an-oauth2-grant-selection-decision-tree-for-securing-rest-apis-d63b5c0c8900 <--Previous   Next-->
Read more