More

    OAUTH – FREQUENTLY ASKED QUESTIONS FOR INTERVIEWS AND SELF EVALUATION

    Why is refresh token needed when you have access token?

    Access tokens are usually short-lived and refresh tokens are used to get new access tokens. If servers provide long living access tokens there is no way to make the client stop using the token if the user / session is invalidated for any reason. With refresh token, the server can validate the user / session every time an access token is generated using a refresh token.

    This may lead to another question. Why use refresh token at all? Why don’t you only use a small lived access token? Answer is that it allows you to keep logged in without having to authrnticate yourself explicitely with the OAuth provider providing your user credentials.

    List various OAuth Grant Types

    1. Authorization code grant
      • Most common
    2. Implicit grant
      • Used mostly for mobile and single page web apps.
    3. Client credentials grant
      • Used mostly for system-to-system access.

    What are the acess token and refresh token expiry times for popular OAuth providers?

    TBD

    Recent Articles

    OAUTH – FREQUENTLY ASKED QUESTIONS FOR INTERVIEWS AND SELF EVALUATION

    Why is refresh token needed when you have access token? Access tokens are usually short-lived and refresh tokens are...

    SUMO LOGIC VIDEOS AND TUTORIALS

    Sumo Logic Basics - Part 1 of 2 (link is external) (Sep 29, 2016)Sumo Logic Basics - Part 2 of 2...

    GIT – USEFUL COMMANDS

    Discard all local changes, but save them for possible re-use later:  git stash Discarding local changes...

    DISTRIBUTED COMPUTING – RECORDED LECTURES (BITS)

    Module 1 - INTRODUCTION Recorded Lecture - 1.1 Introduction Part I – Definition

    BOOK REVIEW GUIDELINES FOR COOKBOOKS

    Whenever you add reviews for the book, please follow below rules. Write issues in an excel.Create an excel...

    Related Stories

    Leave A Reply

    Please enter your comment!
    Please enter your name here

    Stay on op - Ge the daily news in your inbox