Grant - Revision history

Tom: /* Problems */

2021-08-26T18:22:34Z

‎Problems

Tom: /* Context */

2018-10-02T18:30:44Z

‎Context

Tom: /* Solutions */

2018-10-02T18:29:43Z

‎Solutions

Tom: /* Problems */

2018-10-02T18:27:58Z

‎Problems

Tom: /* Context */

2018-07-29T18:22:38Z

‎Context

Tom: /* Context */

2018-07-29T18:20:55Z

‎Context

Tom: /* Context */

2018-07-29T18:20:33Z

‎Context

Tom: /* Context */

2018-07-29T18:11:44Z

‎Context

Tom: Created page with "==Full Title or Meme== An Authorization Grant is a specific structure that gives some entity on the internet authorization to access a Resource. ==Context== In ..."

2018-07-29T18:07:55Z

Created page with "==Full Title or Meme== An Authorization Grant is a specific structure that gives some entity on the internet authorization to access a Resource. ==Context== In ..."

New page

==Full Title or Meme==
An [[Authorization]] [[Grant]] is a specific structure that gives some entity on the internet authorization to access a [[Resource]].

==Context==
In [[Oauth 2.0]] an authorization grant is defined as:

==Problems==

==Solutions==

==References==

[[Category:Glossary]]

@@ Line 9: / Line 9: @@
 ==Problems==
-Once an [[Authorization]] [[Grant]] is issued as a [[Bearer Token]] is no practical way to [[Revocation|Revoke]] it.
+* Once an [[Authorization]] [[Grant]] is issued as a [[Bearer Token]] is no practical way to [[Revocation|Revoke]] it.
 ==Solutions==

@@ Line 4: / Line 4: @@
 ==Context==
 In [[OAuth 2.0]] an authorization grant is defined as:
-   An authorization grant is a credential representing the resource owner's authorization (to access its protected resources) used by the
+<blockquote>An authorization grant is a credential representing the resource owner's authorization (to access its protected resources) used by the client to obtain an access token.  This specification defines four grant types -- authorization code, implicit, resource owner password credentials, and client credentials -- as well as an extensibility mechanism for defining additional types.</blockquote>
 Later use extended grant types to include authorization for users to get access to [[Resource]]s as well as [[User Consent]] for a [[Relying Party]] to access [[User Information]].

← Older revision		Revision as of 18:29, 2 October 2018
Line 14:		Line 14:

	==Solutions==		==Solutions==
		+	# Give [[Authorization]] [[Grant]]s a short life time, like 5 to 10 minuets, which could create problems for long running interactions with a [[Subject]].

	==References==		==References==

← Older revision		Revision as of 18:27, 2 October 2018
Line 11:		Line 11:

	==Problems==		==Problems==
		+	Once an [[Authorization]] [[Grant]] is issued as a [[Bearer Token]] is no practical way to [[Revocation\|Revoke]] it.

	==Solutions==		==Solutions==

@@ Line 8: / Line 8: @@
     credentials, and client credentials -- as well as an extensibility mechanism for defining additional types.
-Later use extended grant types to include authorization for users to get access to [[Resource]]s as well as user [[Consent]] for a [[Relying Party]] to access [[User Information]].
+Later use extended grant types to include authorization for users to get access to [[Resource]]s as well as [[User Consent]] for a [[Relying Party]] to access [[User Information]].
 ==Problems==