node-oauth2-server-implementation | Using oauth2-server : 3.0.0-b2 & Supports MongoDB | Runtime Evironment library
kandi X-RAY | node-oauth2-server-implementation Summary
kandi X-RAY | node-oauth2-server-implementation Summary
Please refer this Fully functional OAuth 2.0 Implementation with production example with node-oauth2-server#2.4.0.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
- Save a token
- Gets a new token for a refresh token
- Gets an access token
- Get client token .
- Gets an authorization code .
- Revoke a token from OAuth2 server .
- Revoke an authorization code from the OAuth2 authorization server .
- Retrieve the user from a client
- save an authorization code
- Get a user by username
node-oauth2-server-implementation Key Features
node-oauth2-server-implementation Examples and Code Snippets
Community Discussions
Trending Discussions on node-oauth2-server-implementation
QUESTION
I am using this library: https://github.com/manjeshpv/node-oauth2-server-implementation
From my understanding of Oauth2:
...ANSWER
Answered 2018-Jun-23 at 14:29and the Authorise sample web service, which I assume is that user would have to click in order for the authorisation server to return an access code for user to call scope specific API urls, but somehow access code is needed too, which I'm confused.
Your terminology is a bit confused. Here is a probably most popular OAuth flow:
- Developer (you) registers OAuth client, receives
clientid
andclientSecret
- User opens some url like oauth.com/authorize, is shown a dialog asking to give some rights to developer's application. (Here clientId is used, but clientSecret is not required)
- If user agrees, authorization code is sent to developer's application (to
redirect_uri
defined at step 1). This code is short-term and cannot be used to access user's data. - Developer's application makes POST request to OAuth server with authorization code,
clientId
andclientSecret
and gets authorization token in exchange. This token can be used to access user's data.
and If I use Client Credential Grant (which I assume is to return an AccessToken using my clientId and clientSecret), then what's the point of the authorise webservice?
Token got by ClientCredentials grant identifies client, but not user. So I guess it is useless in your case.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install node-oauth2-server-implementation
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page