Explore OAuth2 Grant Types with IBM API Connect

Image by Peter H from Pixabay

OAuth grant is a process for a client application to acquire the access token to access the resource. Natively in IBM APIC Connect, OAuth2 functionality is provided. Let’s explore the different grant types that API Connect supported.

Create the OAuth Provider

Create a OAuth2 provider in API Connect, and define the authorization and token path. Select multiple grant types, including Implicit, Application (Client Credentials), Access Code (Authorisation Code), Resource Owner — Password.

In the user security tab, where the grant type of implicit, access code and password will authenticate and authorise, set it as below,

The basic authentication and the url authentication URL user repo will be used to validate the user and authenticate them.

Update the Subscribing Application

When use OAuth, the redirect URL have to be registered. As we will use the Sandbox catalog…