OAuth 2.0 Flow Selection: Authorization Code vs Client Credentials
Choose OAuth 2.0 Authorization Code Flow for user data and Client Credentials Flow for machine-to-machine access.
Loading…
ReadMeFeed / Community knowledge
#oauth-2-0
Real questions. Useful conversations. Find the people who know your stack.
Implementing LinkedIn OAuth 2.0 with PKCE in a Native App
Learn how to secure LinkedIn authentication for a native app using PKCE, handle token storage, respect rate limits, and decide when to refresh or re-authenticate.
linkedinDoes Canva rotate refresh tokens and revoke access tokens immediately when OAuth scopes are reduced?
When building an integration against the Canva Connect API, teams must decide how to enforce least-privilege access over time. The OAuth 2.0 authorization code flow lets an app request specific scopes, but those scopes operate at the resource level rather than the record level. Because access tokens are short-lived, an integration must store and use refresh
OAuth 2.0 token endpoint latency that only appears under concurrent requests
Symptom An OAuth 2.0 authorization server implementing the Authorization Code Grant with PKCE shows acceptable token endpoint latency for sequential requests, but latency rises noticeably once multiple clients exchange codes or refresh tokens in parallel. Single-request benchmarks look normal, so the slowdown only surfaces under concurrency. Context and cons
How to use Cognito LOGOUT endpoint to really log out?
I'm trying to use Federated Authentication to enable login with Microsoft AD. It works fine and we can login. But when I call LOGOUT endpoint as the documentation says ( https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html ) and try to login again I'm not being redirected to Microsoft page to type my email and password again. It see
invalid_grant: AADSTS50126: Error validating credentials due to invalid username or password
I am trying to hit a post request to https://login.microsoftonline.com/<My_Tenant_Id>/oauth2/token from my Java Code, but I am getting the error "invalid_grant: AADSTS50126: Error validating credentials due to invalid username or password" . I have verified the credentials and they are correct (I am able to login to Azure portal and see my AWS APP for
azure
javaCan I implement Azure AD Authentication into an existing PHP application
I built and maintain a PHP web application with an existing set of users. Authentication is username password, within the application. There is now a requirement to provide access to a large new set of users, with existing Azure AD accounts. The client wants these users to be able to login using their Azure identities. The existing users would continue to au
phpinvalid_grant on Refresh Token Retry After Network Timeout During Rotation
Scenario A client uses the OAuth 2.0 Refresh Token grant (RFC 6749, Section 6) against an authorization server that enforces Refresh Token Rotation, as recommended by the OAuth 2.0 Security Best Current Practice. Each successful refresh invalidates the previous refresh token and issues a new one. Failure condition When the client sends a refresh request and
get google Oauth2 access token using ONLY curl
I want to upload a pdf file to Google Drive using curl , for automated testing purposes. I have created an account on Google Cloud Platform(got client ID and Secret) and enabled the Google Drive API. All the methods to connect using OAuth2 involve a web browser or clicking some buttons, which I'm not intending to do. Is there any way to make the whole proces