如何获取 AccessToken

Question

I am building a client and need help getting the access token.

would like to know what needs to be passed in grant_type? client_assertion? Where to get these values from? as these values are required in Authentication in providing AccessToken

POST /token HTTP/1.1 Host: :443 Timestamp: 1212669235 Date: Fri, 12 May 2016 17:21:16 GMT+0000 Content-type: application/x-www-form-urlencoded

grant_type=client_credentials&client_assertion_type=urn:ietf:params:oauth:client-assertion-type:jwt-bearer&scope=profile-search&client_assertion=<JSON Web Signature (JWS)>

HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 653 Date: Tue, 29 Oct 2019 14:13:29 GMT { "access_token": "KjdsjEeRFwksjqefindikHAfDKV...", "token_type": "bearer" "expires_in": 3600 "scope":"profile-search" }

Answer 1

To get the token for Client Credentials type OAuth mechanism, following parameters are needed:

grant_type = client credentials
Access Token URL = <the Auth server URL token end point>
ClientId = <the Id from the auth server where app is registered>
ClientSecret = <value for the secret set>
Scope = <scope as defined for the application>

Attaching the screenshot from Postman for a sample application to generate the token for this grant type.

More details for it can be referenced from: https://www.oauth.com/oauth2-servers/access-tokens/client-credentials/

Sample for this from Azure AD set up is here: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow