Oauth:access to shared resources via Web applications

A Web application which wants to gain access to GKFX resources should redirect the user to a page of the authorization s Erver. When doing so, it informs the authorization server on the access rights it is requesting. This information, which was called Scope, is actually a list of identifiers separated by space characters which is often a Vailable as URLs in order to avoid naming conflicts and is given by the resource server.

Consequently, the authorization server asks the user, in his role as resource owner, for authentication (e.g. by provid ing the username and password). Subsequently, the user can either grant or reject the client's request. The authorization server then redirects the user to the client and passes the user's decision to the client using a URL PA Rameter. If the user has granted the request, the query string contains a code which the client can exchange for a security token. When doing so, the client provides authentication details to the authorization server. Mostly This is also do by giving the username and password.

The token received this is used by the client to gain access to the desired resources via the resource server . Once it has received the token, the resource server must verify its validity and check if it is indeed provided by the NA Med authorization server. Validity can checked using the expiry date contained within the token and the latter may is done by verifying other Evi Dence which is also embedded in the token. Such evidence may, for example, is a digital signature or an HMAC. If such cryptographic proceedings is to be avoided, there is also the possibility of the resource server contacting the A Uthorization server to confirm the validity of the token.

The token may contain information is about the user which might is used by the resource server to verify rights. Alternatively, the token may simply is a key which the resource server may exchange for user-related data when contacting The authorization server.

Oauth:access to shared resources via Web applications