Posts tagged 'mobile'

  • What happens to the tokens after an OAuth Authorization Code grant?

    What happens to the tokens after an OAuth Authorization Code grant?
    Dan Moore  |  Jan 19th, 2023

    At the end of the OAuth Authorization Code grant, after a user presents their credentials at login, a code is returned which can be exchanged for one or more tokens at the token endpoint.

    These tokens include an access token, an optional refresh token, and an optional id token. The access token is used to get access to different APIs and protected resources. The refresh token lets you mint new access tokens, and the id token is used by the client to display information about the user.

    READ MORE