Tweet

realDev

Aug 6 • 8 tweets • 3 min read

OAuth2 - Implicit Flow

Implicit flow is used in old web applications and SPA but due to the expose of access token in URL, it has been deprecated, but let's try to understand it in this thread.

#dotnet #webdeveloper #authentication
Thread 👇

As a first step, the user visits the client app and chooses an OAuth provider(Google) to login.

An authorization request is made by the client app with the client id and token as the response type.

OAuth server asks for the user's consent

The OAUTH server respond with token in the URL

The client app makes request with access token to OAuth server to access the resource

OAuth server responds with requested details.

I hope this is helpful, please follow, comment, and like.
Thank you #dotnet

• • •

Missing some Tweet in this thread? You can try to force a refresh

This Thread may be Removed Anytime!

Twitter may remove this content at anytime! Save it as PDF for later use!

More from @realDevHiz

realDev

@realDevHiz

Aug 3

Many of us have certainly come across the OAuth2 framework or using it without knowing it.

For example, when we visit Canva, we can sign in with our google account, in this case, google acts as an OAuth provider.

👇 Thread

OAuth2 provides a way to access web apps with limited access to the user's account. it grants this access without sharing the password.

it functions with 3 entities that commonly use HTTP requests to communicate.
Client App - Canva
Resource owner - User
OAuth Provider - Google

As a first step, we access the Canva website, and it provides us with these two methods of logging in. at this point we are still in Canva's website, it will redirect to the google OAuth server once we click the sign in and it will be our next step.

Read 12 tweets

Share this page!

realDev

People who liked this thread also liked...

Try unrolling a thread yourself!

More from @realDevHiz

realDev

Did Thread Reader help you today?

Don't want to be a Premium member but still want to support us?