OAuth 2.0 Authorization Code Flow

GPTKB entity

Statements (27)
Predicate Object
gptkbp:instanceOf OAuth 2.0 flow
gptkbp:alternativeTo OAuth 2.0 Client Credentials Flow
OAuth 2.0 Implicit Flow
OAuth 2.0 Resource Owner Password Credentials Flow
gptkbp:canBe gptkb:PKCE
gptkbp:category crypt
authorization protocol
gptkbp:definedIn gptkb:RFC_6749
gptkbp:features authorization code is sent via redirect URI
client secret is used
https://www.w3.org/2000/01/rdf-schema#label OAuth 2.0 Authorization Code Flow
gptkbp:involves client
resource owner
authorization server
resource server
gptkbp:notRecommendedFor public clients
gptkbp:partOf gptkb:OAuth_2.0
gptkbp:recommendation server-side applications
gptkbp:step client exchanges code for access token
user authenticates with authorization server
access token is used to access resource
authorization code is issued to client
gptkbp:usedFor gptkb:government_agency
delegated access
gptkbp:bfsParent gptkb:OAuth_2.0_Pushed_Authorization_Requests
gptkb:Pushed_Authorization_Requests
gptkbp:bfsLayer 8