OAuth 2.0 requests and responses

Requests and responses

When a client applies an authorization and access token, it sends http requests to the authorization server, with its authorization and token endpoints. R equests and responses sent back and forth depend on the type of authorization. Keep in mind that there are four types of authorization:

• Authorization code authorization
• Contractual authorization
• The resource owner key certificate is authorized
• Client certificate authorization

More details about requests and responses for each type of authorization are explained separately below.

However, most of the information described below is a summary. To get a more detailed description of them, you may have to check the OAuth 2.0 specification, or you may want to try to integrate the documentation of the system (e.g. Facebook, Google, Twitter, Foursquare, etc.).