Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

(Preferred authentication method id is "Code Grant". "Password Grant" is a fallback method)

With the resource owner password credentials grant type, the user provides their service credentials (username and password) directly to the application, which uses the credentials to obtain an access token from the service. This grant type should only be enabled on the authorization server if other flows are not viable. Also, it should only be used if the application is trusted by the user (e.g. it is owned by the service, or the user's desktop OS.


Password Grant Flow


Send a POST request to to  <OAUTH2_SERVER_URL >/token?params…

...