OAuth 2.0

OAuth 2.0 : un serveur d’autorisation en mémoire pour tester les parcours côté client. Il gère le grant authorization code avec PKCE, client credentials, les grants password et refresh token, plus une ressource protégée, userinfo, l’introspection (RFC 7662) et la révocation (RFC 7009). L’autorisation est accordée automatiquement en tant qu’utilisateur apibee.

• GEThttps://api.testingapis.com/api/auth/oauth/authorizeStart the authorization code flow and issue a codeStart the authorization code flow and issue a code (auto-approved as user apibee).
• POSThttps://api.testingapis.com/api/auth/oauth/introspectReport whether a token is activeReport whether a token is active (RFC 7662).
• GEThttps://api.testingapis.com/api/auth/oauth/protectedReturn a resource that requires an OAuth access tokenReturn a resource that requires an OAuth access token.
• POSThttps://api.testingapis.com/api/auth/oauth/revokeRevoke an access or refresh tokenRevoke an access or refresh token (RFC 7009).
• POSThttps://api.testingapis.com/api/auth/oauth/tokenExchange a grant for an access tokenExchange a grant for an access token.
• GEThttps://api.testingapis.com/api/auth/oauth/userinfoReturn the profile of the user behind an access tokenReturn the profile of the user behind an access token.

curl -X GET "https://api.testingapis.com/api/auth/oauth/authorize?response_type=code&client_id=apibee-public&redirect_uri=http://localhost:3000/callback&state=xyz&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256"