This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
dido:public:ra:xapend:xapend.b_stds:tech:ietf:oauth [2021/08/13 14:09] murphy |
dido:public:ra:xapend:xapend.b_stds:tech:ietf:oauth [2021/08/18 10:12] (current) murphy [Introduction] |
||
|---|---|---|---|
| Line 17: | Line 17: | ||
| : //In the traditional [[dido:public:ra:xapend:xapend.a_glossary:c:client-server|client-server]] [[dido:public:ra:xapend:xapend.a_glossary:a:authentication|authentication]] model, the [[dido:public:ra:xapend:xapend.a_glossary:c:client|client]] | : //In the traditional [[dido:public:ra:xapend:xapend.a_glossary:c:client-server|client-server]] [[dido:public:ra:xapend:xapend.a_glossary:a:authentication|authentication]] model, the [[dido:public:ra:xapend:xapend.a_glossary:c:client|client]] | ||
| requests an access-restricted resource (protected resource) on the | requests an access-restricted resource (protected resource) on the | ||
| - | server by authenticating with the server using the resource owner's | + | [[dido:public:ra:xapend:xapend.a_glossary:s:server|server]] by authenticating with the server using the resource owner's |
| credentials. In order to provide third-party [[dido:public:ra:xapend:xapend.a_glossary:a:application|applications]] access to | credentials. In order to provide third-party [[dido:public:ra:xapend:xapend.a_glossary:a:application|applications]] access to | ||
| restricted resources, the resource owner shares its credentials with | restricted resources, the resource owner shares its credentials with | ||
| Line 47: | Line 47: | ||
| : //Instead of using the resource owner's credentials to access protected | : //Instead of using the resource owner's credentials to access protected | ||
| resources, the client obtains an access token -- a string denoting a | resources, the client obtains an access token -- a string denoting a | ||
| - | specific scope, lifetime, and other access attributes. Access tokens | + | specific scope, lifetime, and other access attributes. Access [[dido:public:ra:xapend:xapend.a_glossary:t:tokens|tokens]] |
| are issued to third-party clients by an authorization server with the | are issued to third-party clients by an authorization server with the | ||
| approval of the resource owner. The client uses the access token to | approval of the resource owner. The client uses the access token to | ||