Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

OAuth2 difference between callback url and redirect url?

Tags:

oauth-2.0

I am confused how OAuth2 takes you through an entire flow and redirects you back to the page.

For example, I have an auth endpoint: /auth/authorize, callback endpoint /auth/callback, and token endpoint: /auth/token

/auth/authorize gives back the authorize code, redirects to the /auth/callback?code=mycode, but how does this smoothly grab the access_token and redirect the user to the original page?

Should my /auth/callback redirect to my /auth/token or something? And then /auth/token redirects back to the page?

like image 690
atkayla Avatar asked Mar 27 '18 16:03

atkayla


People also ask

What is the difference between callback URL and redirect URL?

The callback URLs, also known as redirect URIs, tell the server where to send the user with the proper tokens after authentication. For purposes within Skuid, you'll want the end user sent back to the Skuid site/org accessing the data.

What is OAuth2 callback URL?

The callback URL typically specifies the URL of an app that is designated to receive an authorization code on behalf of the client app. In addition, this URL string is used for validation.

What is a callback URL?

A callback URL is an address that a server provides, and any computer in the Internet/private network can POST data to it. This method is more efficient than a computer continuously waiting or polling for data.

What is redirect URL in authentication?

A redirect URI, or reply URL, is the location where the authorization server sends the user once the app has been successfully authorized and granted an authorization code or access token.


1 Answers

This might will help you in understanding the flow: enter image description here

Reference: https://techannotation.wordpress.com/2015/06/17/spring-oauth2-with-authorization-code/

like image 193
Ms. Zia Avatar answered Sep 22 '22 20:09

Ms. Zia