Authorization Code Flow

1
2
3
Build the authorization URL and redirect the user to the authorization server
After the user is redirected back to the client, verify the state matches
Exchange the authorization code for an access token
3. Exchange the code for token
Let's break it down, line by line...

  • https://sso.rumbuddy.cz/realms/OAuthPlayground/protocol/openid-connect/token

    The token endpoint URL

  • grant_type=authorization_code

    The grant type, in this case authorization_code

  • client_id=oauth-playground

    Client ID of the application. This is a public identifier for the client, and it is used by the authorization server to identify the application when redirecting the user back to the client.

  • redirect_uri=http://localhost:5555/flow/code-2

    The redirect URI

  • code=--Vto71vecBQbZnbA7ErehWHVQq4x1pm5YtA9Rr7x5zjhMGS

    This is the authorization code we got in the previous step and is used to obtain the access token.

Get token