Authorization Code Grant

GPTKB entity

Statements (23)
Predicate Object
gptkbp:instanceOf OAuth 2.0 Grant Type
gptkbp:alternativeTo gptkb:Client_Credentials_Grant
gptkb:Implicit_Grant
gptkb:Resource_Owner_Password_Credentials_Grant
gptkbp:canBe gptkb:PKCE
gptkbp:definedIn gptkb:RFC_6749
gptkbp:features authorization code is short-lived
code sent via user-agent
token sent via back channel
https://www.w3.org/2000/01/rdf-schema#label Authorization Code Grant
gptkbp:involves client
resource owner
authorization server
resource server
gptkbp:notRecommendedFor public clients without client secret
gptkbp:recommendation web applications
gptkbp:step authorization server issues authorization code
client exchanges code for access token
user authenticates with authorization server
gptkbp:usedFor obtaining access tokens
gptkbp:usedIn gptkb:OAuth_2.0
gptkbp:bfsParent gptkb:Laravel_Passport
gptkbp:bfsLayer 7