Grant type
A grant type is an OAuth-defined authorization flow or token-request parameter specifying how a client obtains an access token.
Spring Security in Action, Second Edition
A grant type is an OAuth 2 protocol flow by which a client obtains a token from an authorization server.
- How it is used
- Selects how a client obtains tokens for user-facing or backend-to-backend OAuth 2 authorization.
- How deep it goes
- Defines the main flows and their security roles, but defers detailed protocol mechanics and implementation steps.
- Examples
- Contrasts user authentication, backend service authentication, token renewal, and deprecated implicit or password flows.
- What you can do after
- Evaluate which OAuth 2 grant type fits a user login, service integration, or access-token renewal requirement.
Read how Spring Security in Action, Second Edition explains grant type →
ASP.NET Core in Action, 3e
A grant type is an OAuth 2.0-defined authorization flow for obtaining access credentials in a particular application scenario.
- How it is used
- Selects an OAuth 2.0 authorization flow for interactive user access or machine-to-machine API access.
- How deep it goes
- Defines three common flows and their scenarios, while directing readers to explore additional grants instead of inventing one.
- Examples
- Uses Facebook photo delegation, interactive authorization, and one API calling another without a user.
- What you can do after
- Evaluate which OAuth 2.0 flow fits an interactive user scenario or a machine-only API workflow.
Related concepts
- authorization code flowincludes · The authorization code flow is an OAuth protocol in which a client obtains a short-lived authorization code after user authorization and exchanges it for access or other tokens.
- client credentials grant typeincludes · The client credentials grant is an OAuth authorization flow in which a client authenticates with its own credentials to obtain an access token without user involvement.
- OAuthpart of · OAuth is an authorization framework that enables a client to obtain limited, delegated access to protected resources without receiving the resource owner's credentials.
- tokenproduces · A token is a discrete unit of text, such as a word, word fragment, character, or symbol, represented and processed as an element by a language model.
- OAuth2AuthorizedClientManagerimplemented by · OAuth2AuthorizedClientManager is a Spring Security component that manages authorized clients and obtains access tokens by executing OAuth 2 grant flows.
- authorization flowconfigures · An authorization flow is a sequence of protocol and application operations through which a client obtains permission to access protected resources.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.