QuestionQ60

Using APIs

An application uses OAuth to obtain access to multiple API resources on an end user’s behalf.

Which two parameters are valid to send to the authorization server during the first step of an authorization code grant flow?

Choose two
  • A URI to which the authorization server will send the user-agent back when access is granted or denied
  • B list of the API resources that the application is requesting to access
  • C secret that was generated by the authorization server when the application registered as an OAuth integration
  • D list of scopes that correspond to the API resources to which the application is requesting to access
  • E name of the application under which the application registered as an OAuth integration
Explanation

An OAuth 2.0 authorization-code authorization request can include a redirect_uri, which identifies where the authorization server returns the user-agent after granting or denying access, and a scope parameter, whose space-delimited values specify the requested access ranges. Client authentication using a client secret occurs at the token endpoint, not in the initial user-agent authorization request.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!