OAuth 2.0 authorization with my own password -
i'm developing application oauth 2 feature. case special. want use own account login. let me take facebook example explain flow of application:
- user start application
- normally oauth request user login his/her own fb account authorize. in application, want login fb account. because know own user id , password. method login account silently?
- user able post message. in case, post fb account.
is possible? have suggestion? thanks
oauth 2.0 allows type of flow, defined in so-called resource owner password credentials (ropc) grant. flow less preferred , backwards compatibility because defeats oauth's primary goal of not having enter end-user credentials in client.
fb not support ropc grant you'll have go through regular authorization code flow. once refresh_token through initial flow, can use long-lived credential new access tokens in same way use fb username/password.
Comments
Post a Comment