MVC5使用哪个OAuth 2.0身份验证流程？

Question

I was going through this Example . Does this example(for facebook) use Explicit Authentication flow or Implicit Authentication flow?

Answer 1

Looking at FacebookAuthenticationHandler.ApplyResponseChallengeAsync() code in the Katana Microsoft.Owin.Security.Facebook namespace, it looks like it always initiates the "Authorisation Code" flow when an HTTP 401 is encountered.

        string authorizationEndpoint =
            "https://www.facebook.com/dialog/oauth" +
                "?response_type=code" +
                "&client_id=" + Uri.EscapeDataString(Options.AppId) +
                "&redirect_uri=" + Uri.EscapeDataString(redirectUri) +
                "&scope=" + Uri.EscapeDataString(scope) +
                "&state=" + Uri.EscapeDataString(state);

So that's why you have to provide both your clientId and secret in the config. For implicit flow you would not use the secret anywhere.