OAuth 2.0

OAuth 2.0: server otorisasi di memori untuk menguji alur klien. Mendukung grant authorization code dengan PKCE, client credentials, password, dan refresh token, ditambah resource terlindungi, userinfo, introspeksi (RFC 7662), dan pencabutan (RFC 7009). Otorisasi disetujui otomatis sebagai pengguna apibee.

• GEThttps://api.testingapis.com/api/auth/oauth/authorizeStart the authorization code flow and issue a codeStart the authorization code flow and issue a code (auto-approved as user apibee).
• POSThttps://api.testingapis.com/api/auth/oauth/introspectReport whether a token is activeReport whether a token is active (RFC 7662).
• GEThttps://api.testingapis.com/api/auth/oauth/protectedReturn a resource that requires an OAuth access tokenReturn a resource that requires an OAuth access token.
• POSThttps://api.testingapis.com/api/auth/oauth/revokeRevoke an access or refresh tokenRevoke an access or refresh token (RFC 7009).
• POSThttps://api.testingapis.com/api/auth/oauth/tokenExchange a grant for an access tokenExchange a grant for an access token.
• GEThttps://api.testingapis.com/api/auth/oauth/userinfoReturn the profile of the user behind an access tokenReturn the profile of the user behind an access token.

curl -X GET "https://api.testingapis.com/api/auth/oauth/authorize?response_type=code&client_id=apibee-public&redirect_uri=http://localhost:3000/callback&state=xyz&code_challenge=E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM&code_challenge_method=S256"