- 08 Jul 2024
- 1 Minute to read
- Print
- DarkLight
OAuth 2.0 Authorization Request
- Updated on 08 Jul 2024
- 1 Minute to read
- Print
- DarkLight
Issue a GET to /idp/profile/oauth2/auth
with the following parameters.
Parameter | Type | Description |
---|---|---|
response_type | String required | The default value is “code” |
client_id | String required | The Client ID |
redirect_uri | String required | The registered callback URL |
scope | String optional | Space-delimited API scopes to request. The default value is “basic”. |
state | String optional | An opaque value used by the client application to maintain state between the request and callback. |
response_mode | String optional | Not Used |
If the authenticating user does not already have an authenticated Federation session, they will be redirected to the login page.
After successful authentication or validation of the user’s current session, the browser will be redirected to the callback URL with a “code” parameter and a “state” parameter (if one was supplied in the initial request).
The “code” must be exchanged for an access token in the next step.
RapidIdentity currently supports a single scope of “basic” which gives read-only access to the authenticated user’s profile.