You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
OAuth 2.0 client password authentication strategy for Passport.
This module lets you authenticate requests containing client credentials in the
request body, as defined
by the OAuth 2.0 specification. These credentials are typically used protect
the token endpoint and used as an alternative to HTTP Basic authentication.
The OAuth 2.0 client password authentication strategy authenticates clients
using a client ID and client secret. The strategy requires a verify callback,
which accepts those credentials and calls done providing a client.
Use passport.authenticate(), specifying the 'oauth2-client-password'
strategy, to authenticate requests. This strategy is typically used in
combination with HTTP Basic authentication (as provided by passport-http),
allowing clients to include credentials in the request body.
For example, as route middleware in an Express
application, using OAuth2orize
middleware to implement the token endpoint:
The example
included with OAuth2orize
demonstrates how to implement a complete OAuth 2.0 authorization server.
ClientPasswordStrategy is used to authenticate clients as they request access
tokens from the token endpoint.