During development, it happens that you quickly want to try out a RESTful request. If you are running this request against an OAuth2 protected resource, you'll need an access_token. So what is the easiest approach to get one? Unfortunately, OAuth2 is not supported just like Basic Authentication in the browser.... read more →
Jun
18
Jun
11
The third OAuth2 flow that we'll cover as part of this series is the Resource Owner Password Flow. We've covered the OAuth2 Authorization Grant Flow and the OAuth2 Implicit Flow so far. We've also seen how client applications can refresh expired access tokens. The Resource Owner Password Flow is really... read more →
Jun
05
Yikes, I wanted to blog about refreshing an access token first, but instead I went on writing about the implicit flow today. So instead of changing the post order afterwards and not admitting my mistake, I'll just blog about the refresh process now... my mistake. If you need a "refresher"... read more →
Jun
05
In this part of the OAuth2 series we'll be looking at the Implicit Flow, which is also known as the Client-Side Flow. Let's get started .The Implicit Flow (some call it Implicit Grant Flow, too) is called like that, as the required access token is sent back to the client application... read more →
Jun
01
Although the OAuth2 Specification is still a working document, there are already quite a few big services out there that are using OAuth2 as their authentication and authorization framework of choice: Foursquare, Facebook, Twitter (although v1)... just to name a few. As hybris offers the OCC Web Services, a set... read more →