OAuth Grant Types

Learn about the two-legged and three-legged flows, as well as the client types used in these flows.

This videos forms part of the Oracle Cloud Primer Series.

For more details visit the Cloud Primer Playlist at:

=================================
To improve the video quality, click the gear icon and set the Quality to 1080p/720p HD.

Copyright © 2017 Oracle and/or its affiliates. Oracle is a registered trademark of Oracle and/or its affiliates. All rights reserved. Other names may be registered trademarks of their respective owners. Oracle disclaims any warranties or representations as to the accuracy or completeness of this recording, demonstration, and/or written materials (the “Materials”). The Materials are provided “as is” without any warranty of any kind, either express or implied, including without limitation warranties or merchantability, fitness for a particular purpose, and non-infringement.

[rupeshvislawath]

I could not follow Authorization grant type and Implicit Grant was completely went over my head. Did not understand a single thing about it. Although video remains good with high quality animations and nice explanation of remaining grant types.

[inotterwords]

Thank you so much for making such a high-quality video.

[kyuwoochoi]

1:53 Client credential grant type
2:34 Resource owner password grant type
3:26 Authorization code grant type
5:01 Implicit grant type
5:48 Which grant type for your application?

[oleksandrgolovatyi]

Very nice content, but I don't think its a good idea to put all of the grant types into one presentation. I wish there could be more real life scenarios per each type. The high speed of the speech and switching the slides does not help to get it more clear for a novice

[randomsde]

Very helpful! The workflow of the Authorization Code grant type around 4:13 is very similar to what I observed from an actual OAuth2 flow by Playwright.

[marcelohenrique]

Very nice video, in all aspects. I often find 50+ minute videos about OAuth and you've managed to explain it very well in a short time. thanks! Just one question. At 4:39, shouldn't the client (our server) send send the client_secret along in the request to the authentication server? Thanks in advance

[brendonstephens]

Good video but it goes through the content way too fast.

[CorentinLeman]

1:25 I dont understand what's that front channel and back channel. Why is the resource owner highlighted when the user is mentioned? Is the user the resource owner? Then why is the user on the right side and the clients app on the left side?
Why is the user on the same side as the authorization server?

[a.sharma]

There is a mistake where they say that Authorization Code is commonly used for JavaScript and Third Party Apps.

[muhammedozdogan]

Implicit and Auth Code is too complicated 🙄

[gauravwadhwa]

Not to be slow and video is at very high level and not in proper flow

[taobot]

At 5:11, the token_type returned to the 3rd party application in the redirect uri has the token_type=example. Not sure that's right. I know the point is that it's an example, but it might be an idea to give an example of an actual token type here. For example, a bearer token.

[Killer_racoon]

Dislikes are from TurboPascal developers