oauth
Flows tagged oauth. 8 diagrams.
DPoP Token Request
Bind an access token request to a key pair.
DPoP Token Usage
Call a DPoP-protected API with a bound token.
OAuth Authorization Code
Classic three-party authorization code exchange.
OAuth Code + PKCE
Authorization code exchange hardened with PKCE.
OAuth Client Credentials
Get an access token for machine-to-machine API calls.
OAuth Device Authorization
Sign in on input-constrained devices using a second device.
OAuth Private Key JWT
Authenticate a client with a signed JWT, not a secret.
OAuth Refresh Token
Renew an expired access token without user interaction.