This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.

Try Authorization Code Grant

Owned by Former user (Deleted)
Last updated: May 01, 2016 by Former user (Deleted)
2 min read

The Authorization Code Grant is one of the grant types in the OAuth 2.0 specification. For more information about this grant type, see  Authorization Code Grant.

Before you begin, you must first  set up the sample webapp. 

This section demonstrates the Authorization Code Grant with PKCE and without PKCE. 

The Proof Key for Code Exchange (PKCE) is a specification supported by WSO2 Identity Server to mitigate code interception attacks. See Mitigating Authorization Code Interception Attacks to configure PKCE for an OAuth application.

Running the application (without PKCE) 

  1. Visit the URL http://localhost:8080/playground2/oauth2.jsp to start the application.

  2. Enter the following details and click Authorize .

    Authorization Grant Type: Authorization Code
    Client ID: (the client id received at the application registration)
    Callback URL: http://localhost:8080/playground2/oauth2client
    Authorize Endpoint: https://localhost:9443/oauth2/authorize

    1.png


  3. Log in with the user credentials.
    2.png

  4. Click Approve to consent to this action.

    3.png

  5. Provide the following details and click on Get Access Token.

    Callback URL: http://localhost:8080/playground2/oauth2client
    Access Token Endpoint: https://localhost:9443/oauth2/token
    Client Secret: (client secret received at the application registration)

    If you have configured the service provider in a tenant, you have to add the tenant domain as a query parameter to the access token endpoint.

    If the tenant domain is wso2.com, access token endpoint will be as follows.

    Access Token Endpoint: https://localhost:9443/oauth2/token?tenantDomain=wso2.com

     

    4.png
  6. At this point the application receives the Access Token .
    5.png

  7. Click on Get Photos.

  8. Now you should be able to see the user photos.

    6.png

Running the application (with PKCE) 

  1. Visit the URL http://localhost:8080/playground2/oauth2.jsp to start the application.

  2. Enter the following details and click Authorize.

    Authorization Grant Type: Authorization Code
    Client ID: (the client id received at the application registration)
    Callback URL: http://localhost:8080/playground2/oauth2client
    Authorize Endpoint: https://localhost:9443/oauth2/authorize
    Use PKCE: Yes 
    PKCE Challenge Method:

     

  3. Log in with the user credentials.
    2.png

  4. Click Approve to consent to this action.

    3.png

  5. Provide the following details and click on Get Access Token.

    Callback URL: http://localhost:8080/playground2/oauth2client
    Access Token Endpoint: https://localhost:9443/oauth2/token
    Client Secret: (client secret received at the application registration)
    PKCE Verifier: (this will be populated using the value generated in step 1) 

    If you have configured the service provider in a tenant, you have to add the tenant domain as a query parameter to the access token endpoint.

    If the tenant domain is wso2.com, access token endpoint will be as follows.

    Access Token Endpoint: https://localhost:9443/oauth2/token?tenantDomain=wso2.com

     

  6. At this point the application receives the  Access Token .
    5.png

  7. Click on Get Photos.

  8. Now you should be able to see the user photos.

Related Topics