Diagram PDF

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 1

OAuth Authentication Flow

Service Provider

Direct User to
Service Provider

B
C

Grant
Request Token

Obtain User
Authorization

Direct User to
Consumer

Request
Access Token

D
E

Grant
Access Token

Obtain Unauthorized
Request Token

User Authorizes
Request Token

Request
Request Token

Person Using Web Browser


or Manual Entry

Service Provider Grants


Request Token

Consumer Directs User to


Service Provider
Request includes
oauth_token (optional),
oauth_callback (optional).
Service Provider Directs
User to Consumer
Request includes
oauth_token (optional).

G
Consumer/Service Provider

Request includes
oauth_consumer_key,
oauth_signature_method,
oauth_signature,
oauth_timestamp,
oauth_nonce,
oauth_version (optional).

Access Protected
Resources

Consumer Requests
Request Token

Consumer Requests
Access Token
Request includes
oauth_consumer_key,
oauth_token,
oauth_signature_method,
oauth_signature,
oauth_timestamp,
oauth_nonce,
oauth_version (optional).

Response includes
oauth_token,
oauth_token_secret.
Exchange Request Token
for Access Token

Consumer

Service Provider
Grants Access Token
Response includes
oauth_token,
oauth_token_secret.

Consumer Accesses
Protected Resources
Request includes
oauth_consumer_key,
oauth_token,
oauth_signature_method,
oauth_signature,
oauth_timestamp,
oauth_nonce,
oauth_version (optional).

You might also like