1

I've been requested by a client to incorporate OAuth authentication within a REST service. The setup I am working with is client/user accessing a service directly. The service is not connecting to another service. I was asked to have OAuth implemented so that users/clients are authenticated by supplying the username and password in the authorization request and not have them log in via a web page. My client has read information from other sites like paypal (https://developer.paypal.com/docs/integration/direct/paypal-oauth2/) which lead him to believe this was possible. So my underlying question is how do I configure an Authoirzation Server to allow for authorization when supplied a password and username directly?

Peter

4

1 回答 1

2

该流程称为“资源所有者密码凭据授予”,并在4.3 中进行了描述。RFC 6749 (OAuth 2.0) 的资源所有者密码凭证授予

在此流程中,客户端访问令牌端点而不访问授权端点。因此,请检查授权服务器的令牌端点的配置。

于 2014-06-22T18:53:55.317 回答