2024年3月20日 · By using the authentication libraries for the Microsoft identity platform, applications authenticate identities and acquire tokens to access protected APIs. This article describes authentication flows and the application scenarios that they're used in. Application categories. Security tokens can be acquired from several types of applications ...

2024年3月25日 · Your application can use one or more authentication flows. Each flow uses certain token types for authentication, authorization, and token refresh, and some also use an authorization code.

2024年4月8日 · Apps using the OAuth 2.0 authorization code flow acquire an access_token to include in requests to resources protected by the Microsoft identity platform (typically APIs). Apps can also request new ID and access tokens for previously authenticated entities by using a refresh mechanism.

Learn about the various flows used for authentication and authorization of applications and APIs.

Learn how the Authorization Code flow works and why you should use it for regular web apps.

2024年4月24日 · Understanding these different types of authentication flows, how they work, and when to use them is essential for protecting user data and ensuring a seamless user experience. We acknowledge that the landscape of digital security is constantly evolving.

Which OAuth 2.0 Flow Should I Use? The OAuth 2.0 Authorization Framework supports several different flows (or grants). Flow are ways of retrieving an Access Token.

When you implement managed login authentication in your application, Amazon Cognito manages the flow of these prompts and challenges. When you implement flows with an AWS SDK in your application back end, you must construct the logic of requests, prompt users for input, and respond to challenges.

When you use the enhanced authflow, your app first presents a proof of authentication from an authorized Amazon Cognito user pool or third-party identity provider in a GetId request.

2023年9月16日 · OAuth flows enable users to authorize access to resources and authenticate resource owners—essentially, they are different ways of retrieving access tokens. The right OAuth flow depends on the application’s needs and requirements. This is part of a series of articles about OAuth. Here are some examples of OAuth flows: