How deeply does ASP.NET Core in Action, 3e cover client credentials grant type?

Defines the scenario and contrasts common grant types, but does not detail token-request implementation.

Client credentials grant type

As explained in ASP.NET Core in Action, 3e

The client credentials grant is an OAuth 2.0 flow in which an application authenticates as itself to obtain authorization for machine-to-machine access.

The client credentials grant is an OAuth 2.0 flow for machine-to-machine access. An application authenticates as itself to obtain authorization for calling a protected API, without a user interaction. section 25.7 section 25.1.3

Choose the grant type according to who initiates the access:

Use client credentials when one API needs to call another API and no user is involved. section 25.1.3
Prefer authorization code with PKCE for an interactive flow initiated by a user. section 25.7 section 25.1.3
Treat other OAuth 2.0 grants as alternatives when the scenario does not match these common flows. section 25.1.3

A machine-only workflow

A scheduled service requests authorization and calls another API on its own behalf. Because no person initiates or consents to the interaction, client credentials fits the workflow. section 25.7

How ASP.NET Core in Action, 3e covers it

liveBook manning.com

Read ASP.NET Core in Action, 3e on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Spring Security in Action, Second EditionThe client credentials grant type is an OAuth 2 grant in which a client obtains an access token using its own credentials without user involvement.
liveBook manning.com

Authorization in ActionA client credentials grant is an OAuth grant type in which a client authenticates with its own credentials to obtain an access token without representing an end user.
liveBook manning.com

Software Security for DevelopersThe client credentials flow is an OAuth flow in which a client authenticates with its own credentials to obtain an access token without an end-user authorization step.
liveBook manning.com

Secure APIsThe client credentials flow is an OAuth authorization flow in which a client authenticates with its own credentials to obtain an access token without user interaction.

Compare how 5 books explain client credentials grant type →

Related concepts

API keyproduces · An API key is a credential used to identify or authorize a client accessing an application programming interface.
authorization code flowcontrasts with · The authorization code flow is an OAuth protocol in which a client obtains a short-lived authorization code after user authorization and exchanges it for access or other tokens.
grant typekind of · A grant type is an OAuth-defined authorization flow or token-request parameter specifying how a client obtains an access token.
OAuthpart of · OAuth is an authorization framework that enables a client to obtain limited, delegated access to protected resources without receiving the resource owner's credentials.

This explainer was generated by Manning's knowledge graph from the text of ASP.NET Core in Action, 3e. The section links point to the parts of the book it draws on.