
Episode 376: Justin Richer On API Security with OAuth 2
Software Engineering Radio - the podcast for professional software developers
00:00
OAuth 2 Client Credentials Grant Type
Everything else in OAuth 2 was invented as an optimization of the authorization code flow. One that still does make sense is the client credentials grant type. That's the one you use when there's not a user involved at all. The key here is that the resource servers downstream now only have to care about access tokens.
Transcript
Play full episode