Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix help file for password grant referesh_token curl sample #42

Merged
merged 7 commits into from
Apr 29, 2019
Merged

Fix help file for password grant referesh_token curl sample #42

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
7ebbf7f
Feature to allow publishing of an api without having to require any a…
santokhsingh Mar 13, 2019
912e198
Don't show application related message for no-auth API
santokhsingh Mar 14, 2019
ace3e45
Fixed issue https://github.com/Haufe-Lexware/wicked.haufe.io/issues/177
santokhsingh Mar 15, 2019
873ba20
Fixed https://github.com/Haufe-Lexware/wicked.haufe.io/issues/179
santokhsingh Mar 19, 2019
ef33937
Merge branch 'next' into feat/no-auth
DonMartin76 Apr 1, 2019
0805ae3
Fix help file for password grant referesh_token curl sample
santokhsingh Apr 16, 2019
a2fe281
Merge branch 'next' into feat/no-auth
DonMartin76 Apr 29, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions views/help/oauth2_password_grant.jade
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -109,13 +109,13 @@ block help_content
as before. Using curl syntax, the call will look like this (for confidential clients):

pre.
curl -X POST -H 'Content-Type: application/json' -d '{"grant_type=refresh_token","client_id":"<b style="color:#0a0">(your client id)</b>","client_secret":"<b style="color:#0a0">(your client secret)</b>","refresh_token":"<b style="color:#0a0">(refresh token)</b>"}' #{authUrl}<b style="color:#0a0">(auth method id)</b>/api/<b style="color:#0a0">(api id)</b>/token
curl -X POST -H 'Content-Type: application/json' -d '{"grant_type":"refresh_token","client_id":"<b style="color:#0a0">(your client id)</b>","client_secret":"<b style="color:#0a0">(your client secret)</b>","refresh_token":"<b style="color:#0a0">(refresh token)</b>"}' #{authUrl}<b style="color:#0a0">(auth method id)</b>/api/<b style="color:#0a0">(api id)</b>/token

p.
As above, public clients (non-confidential clients) <b>must not</b> present their client secret when refreshing the token:

pre.
curl -X POST -H 'Content-Type: application/json' -d '{"grant_type=refresh_token","client_id":"<b style="color:#0a0">(your client id)</b>","refresh_token":"<b style="color:#0a0">(refresh token)</b>"}' #{authUrl}<b style="color:#0a0">(auth method id)</b>/api/<b style="color:#0a0">(api id)</b>/token
curl -X POST -H 'Content-Type: application/json' -d '{"grant_type":"refresh_token","client_id":"<b style="color:#0a0">(your client id)</b>","refresh_token":"<b style="color:#0a0">(refresh token)</b>"}' #{authUrl}<b style="color:#0a0">(auth method id)</b>/api/<b style="color:#0a0">(api id)</b>/token

p.
If successful, the Authorization Server will return a new access token and a new refresh token.
Expand Down