Skip to content
This repository has been archived by the owner on Feb 17, 2024. It is now read-only.

Fix errors with the Authorization Grants for OAuth 2.0 #99

Closed
nohorbee opened this issue Sep 16, 2014 · 3 comments
Closed

Fix errors with the Authorization Grants for OAuth 2.0 #99

nohorbee opened this issue Sep 16, 2014 · 3 comments
Assignees
Milestone

Comments

@nohorbee
Copy link

The list should be clear regarding the Authorization Grant names:

  • Authorization code grant: authorization_code
  • Resource owner password credentials grant: password
  • Client credentials grant: client_credentials
  • Implicit grant: implicit
  • Refresh token grant: refresh_token
#%RAML 0.8
title: My Sample API
securitySchemes:
    - oauth_2_0:
        description: |
            OAuth 2.0 implementation.
        type: OAuth 2.0
        settings:
          authorizationUri: https://www.myapi.com/1/oauth2/authorize
          accessTokenUri: https://www.myapi.com/1/oauth2/token
          authorizationGrants: [ authorization_code, password, client_credentials, implicit, refresh_token ]
@nohorbee nohorbee added this to the v1.0 milestone Sep 16, 2014
@usarid usarid modified the milestones: v1.0, v1.0 - staging Sep 30, 2015
@aldonline
Copy link
Contributor

Let's take the opportunity to fix it and make it right ( see: #177 )

@aldonline aldonline modified the milestones: v1.0 - tentatively subsumed by other candidates, v1.0 - staging Oct 1, 2015
@sichvoge sichvoge removed this from the v1.0 - tentatively subsumed by other candidates milestone Apr 29, 2016
@sichvoge sichvoge added this to the RAML 1.0 milestone Apr 29, 2016
@usarid
Copy link
Contributor

usarid commented May 1, 2016

In fact refresh_token is not a grant type. Confusingly, in OAuth 2.0, to use a refresh token (which MAY be obtained with one of the grant type that issues refresh tokens) to obtain another access token, you submit a request with a parameter called grant_type whose value is set to refresh_token. But there is no notion of an API that supports this grant type as it's not a type of authorization grant. Let's remove it from the list.

@sichvoge
Copy link
Contributor

sichvoge commented May 2, 2016

In summary, RAML 1.0 will have the following OOTB grant types

  • Authorization code grant: authorization_code
  • Resource owner password credentials grant: password
  • Client credentials grant: client_credentials
  • Implicit grant: implicit

petrochenko-pavel-a added a commit to raml-org/raml-definition-system that referenced this issue May 2, 2016
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

4 participants