Skip to content

Authentication: Client side web application flow

Håkon André Knudsen edited this page Sep 25, 2019 · 1 revision

This flow is also called Implicit Grant Flow. It should be used when only temporary access to data is required. The oauth client is running in the browser (using javascript/flash/silverlight). Refresh token’s is not allowed in this flow, but we support sliding expiration of the access token. When you use this flow you don't get an authorization code, and you don't have a client-secret.

TODO: Code example