Bearer Authorization
Review, Research, and Discussion
- Write the following steps in the correct order:
- .Register your application to get a client_id and client_secret
- Ask the client if they want to sign in via a third party
- Make a request to a third-party API endpoint
- Redirect to a third party authentication endpoint
- Make a request to the access token endpoint
- Receive access token
- Receive authorization code
- What can you do with an authorization code?
- What can you do with an access token?
Access tokens are used to make API requests on behalf of a user
- What’s a benefit of using OAuth instead of your own basic authentication?
It enables apps to obtain limited access (scopes) to a user’s data without giving away a user’s password. It decouples authentication from authorization and supports multiple use cases addressing different device capabilities.
Github view