The third OAuth2 flow that we'll cover as part of this series is the Resource Owner Password Flow. We've covered the OAuth2 Authorization Grant Flow and the OAuth2 Implicit Flow so far. We've also seen how client applications can refresh expired access tokens. The Resource Owner Password Flow is really... read more →
Jun
11
Jun
05
Yikes, I wanted to blog about refreshing an access token first, but instead I went on writing about the implicit flow today. So instead of changing the post order afterwards and not admitting my mistake, I'll just blog about the refresh process now... my mistake. If you need a "refresher"... read more →
Jun
05
In this part of the OAuth2 series we'll be looking at the Implicit Flow, which is also known as the Client-Side Flow. Let's get started .The Implicit Flow (some call it Implicit Grant Flow, too) is called like that, as the required access token is sent back to the client application... read more →
Jun
01
Although the OAuth2 Specification is still a working document, there are already quite a few big services out there that are using OAuth2 as their authentication and authorization framework of choice: Foursquare, Facebook, Twitter (although v1)... just to name a few. As hybris offers the OCC Web Services, a set... read more →
May
22
We recently released the OCC Web Services - Omni Commerce Web Services - which are RESTful Web Services for the key commerce functionality of the hybris platform. While calling these web services from a mobile client or other system like a POS terminal is no problem, as the REST calls... read more →