Sign Up Sign In
Index Documentation Download Check license
Authorization secret post
General information about client authorization using the secret post method
1) To authorize a client application with the secret post type, you need to add the client_id and client_secret parameters to the existing request. Example: client_id = id-wEkziJ6jW6dJg36GT2a1ww7C4BpLeXCrMRLAVgOyQNgSKZV client_secret = N2f9TvacRuBsRLQ2mSw9HOQ2GoLCDIaDPsoXfT0xNu8kcuAZSO Example request in cURL:
curl --request POST \ --url http://localhost:9000/oauth2/token \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data grant_type=client_credentials \ --data client_id=id-wEkziJ6jW6dJg36GT2a1ww7C4BpLeXCrMRLAVgOyQNgSKZV \ --data client_secret=N2f9TvacRuBsRLQ2mSw9HOQ2GoLCDIaDPsoXfT0xNu8kcuAZSO
A practical example of client authorization using the secret post method
0) Since in this section we will only test client authorization, in the admin panel we will set the OAuth2 mode to OAuth2 client credential flow, and the client authorization value to Client secret post
1) For training, we will create a test client
2) Let's create a POST request to address http://localhost:9000/oauth2/token
And we will receive an access token.