All diagrams

confidential-client

Flows tagged confidential-client. 5 diagrams.

OAuth 2.0

OAuth Authorization Code

Classic three-party authorization code exchange.

 OAuth 2.0

OAuth Code + PKCE

Authorization code exchange hardened with PKCE.

 OAuth 2.0

OAuth Client Credentials

Get an access token for machine-to-machine API calls.

 OAuth 2.0

OAuth Private Key JWT

Authenticate a client with a signed JWT, not a secret.

 OAuth 2.0

OAuth Refresh Token

Renew an expired access token without user interaction.