Skip to content

The evo OAuth 2.0 APIs

Jump to bottom
egaumer edited this page Feb 18, 2013 · 3 revisions

Back to Security Architecture

The current/proposed OAuth api in evo.

Client Credentials Flow

The client can request an access token using only its client credentials (or other supported means of authentication) when the client is requesting access to the protected resources under its control, or those of another resource owner that have been previously arranged with the authorization server.

Request

curl -u admin:admin 'http://localhost:2600/oauth/token' -d grant_type=client_credentials

Parameters

  • grant_type - only support client_credentials as of now

Response

{
  "access_token":"9d9db08a-11c7-4be1-953c-09e7354eb77d",
  "token_type":"bearer",
  "expires_in":43199,
  "scope":"read write"
}

Use the access token to access the API

curl -H 'Authorization: bearer 9d9db08a-11c7-4be1-953c-09e7354eb77d' http://localhost:2600/v1/twitter/tweet/1
Clone this wiki locally