An authorization endpoint is where an OAuth client starts an authorization request and obtains the resource owner's authorization. In the authorization code flow, successful authentication leads to a redirect containing an authorization code, which the client exchanges for an access token. section 14.2
A request typically supplies:
- response_type=code to select the authorization code grant type. section 14.2
- client_id, scope, and a previously configured redirect_uri. section 14.2
- A code_challenge and code_challenge_method when proof-key protection is used. section 14.2
Listing 14.7 The response of the OpenID configuration request
{
"issuer": "http://localhost:8080",
"authorization_endpoint":
"http://localhost:8080/oauth2/authorize", #1
"token_endpoint": "http://localhost:8080/oauth2/token", #2
"token_endpoint_auth_methods_supported": [
"client_secret_basic",
"client_secret_post",
"client_secret_jwt",
"private_key_jwt"
],
"jwks_uri": "http://localhost:8080/oauth2/jwks", #3
"userinfo_endpoint": "http://localhost:8080/userinfo",
"response_types_supported": [
"code"
],
"grant_types_supported": [
"authorization_code",
"client_credentials",
"refresh_token"
],
"revocation_endpoint": "http://localhost:8080/oauth2/revoke",
"revocation_endpoint_auth_methods_supported": [
"client_secret_basic",
"client_secret_post",
"client_secret_jwt",
"private_key_jwt"
],
"introspection_endpoint":
"http://localhost:8080/oauth2/introspect", #4
"introspection_endpoint_auth_methods_supported": [
"client_secret_basic",
"client_secret_post",
"client_secret_jwt",
"private_key_jwt"
],
"subject_types_supported": [
"public"
],
"id_token_signing_alg_values_supported": [
"RS256"
],
"scopes_supported": [
"openid"
]
}
Discover the authorization endpoint through the OpenID configuration response; the default path is /oauth2/authorize. section 14.2
Authorization request
http://localhost:8080/oauth2/authorize?response_type=code&client_id=client&scope=openid&redirect_uri=https://www.manning.com/authorized&code_challenge=...&code_challenge_method=S256 section 14.2
