Google OAuth 2.0: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
| Line 2: | Line 2: | ||
* [[OAuth_2.0#Subjects|OAuth 2.0]] | * [[OAuth_2.0#Subjects|OAuth 2.0]] | ||
=Overview= | |||
=Call Sequences= | =Call Sequences= | ||
==Authorization Code Grant Type== | |||
<font color=darkgray>Experimental:</font> | <font color=darkgray>Experimental:</font> | ||
Revision as of 23:59, 16 May 2019
Internal
Overview
Call Sequences
Authorization Code Grant Type
Experimental:
GET /o/oauth2/iframe
GET /o/oauth2/iframerpc?action=checkOrigin&origin=http%3A%2F%2Fnombp3.local%3A3002&client_id=7777777777777-a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a.apps.googleusercontent.com
client_id value is hardcoded in the client application (js/gutil.js).
Response:
:status: 200
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
expires: Thu, 16 May 2019 22:30:28 GMT
date: Thu, 16 May 2019 21:30:28 GMT
cache-control: public, max-age=3600
content-language: en-US
content-encoding: gzip
server: ESF
x-xss-protection: 0
alt-svc: quic=":443"; ma=2592000; v="46,44,43,39"
{"valid":false}
If the client is deemed valid:
GET /o/oauth2/iframerpc?action=listSessions&client_id=7777777777777-a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a.apps.googleusercontent.com&origin=http%3A%2F%2Flocalhost%3A3002&scope=openid%20profile%20email&ss_domain=http%3A%2F%2Flocalhost%3A3002