Skip to content

Conversation

@ManuTrt
Copy link
Collaborator

@ManuTrt ManuTrt commented Dec 17, 2024

  • Integrated Authorization Code grant type (https://developer.okta.com/blog/2018/04/10/oauth-authorization-code-grant-type).
  • Use env files for reading api urls and other global public values
  • To maintain a better separation of concerns and extendibility Login and Register are fully managed by the Authentication Server (Readerbench API).
  • Short flow explanation: The Client (Readerbench Vue) will ask the Authorization Server (Readerbench API) to access the Resource Owner's (User) data (models, datasets etc.) on their behalf from the Resource Server (Readerbench API). The User has to be authenticated (a session must exist). The Client gets a code that will use to get an access and refresh token.
  • Update: Added PKCE extension

Closes #105

@ManuTrt ManuTrt added the enhancement New feature or request label Dec 17, 2024
@ManuTrt ManuTrt linked an issue Dec 17, 2024 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Integrate Authorization Code flow into readerbench-vue

3 participants