Implicit Grant Authorization

When the front end initiates application single sign-on authentication, it assembles the authentication request URL using the obtained client_id parameter and initiates access.

Request Description

GET https://{your_domain}/api/v1/oauth2/authorize

Request Parameters

Parameter	Name	Required	Example	Description
response_type	Authorization type	Required	token	Fixed value: token
client_id	Application identifier	Required	RqB2HiHC9N676qA	clientid assigned to the third-party application after access is approved.
redirect_uri	Callback address	Optional	http://oauthdemo.bccastle.com /demo/index.jsp	Callback address after authorization. Must match the trusted domain filled in when registering the application. Note that the URL needs to be URL-encoded.
state	State code	Optional	15924362	Client-side state value. Used to prevent CSRF attacks. It will be returned unchanged in the callback after successful authorization. Please check the binding between the user and the state.
scope	Scope	Optional	get_user_info	Fixed value: get_user_info

Request Example

https://{your_domain}/api/v1/oauth2/authorize?response_type=token&client_id={client_id}&redirect_uri=http://oauthdemo.bccastle.com/demo/index.jsp&state=15924362

Response Example

Success response example

HTTP Status: 302 REDIRECT
http://oauthdemo.bccastle.com/demo/index.jsp/#access_token=NObiIMkOvBgHIo8&token_type=Bearer&expires_in=6285&scope=get_user_info&state=15924362

Missing client_id parameter

HTTP Status: 400 BAD REQUEST 
{
    "error": "invalid_request",
    "error_description": "Missing client_id"
}

Incorrect client_id parameter

HTTP Status: 400 BAD REQUEST 
{
    "error": "invalid_request",
    "error_description": "client_id parameter is error"
}

response_type parameter name or value error

HTTP Status: 400 BAD REQUEST 
{
    "error": "unsupported_response_type",
    "error_description": "Unsupported response types: [xxx]"
}

Incorrect redirect_uri parameter

HTTP Status: 400 BAD REQUEST
{ 
    "error": "invalid_request",
    "error_description": "Invalid redirect: https://www.baidu.com does not match one of the registered values."
}

Incorrect scope parameter

HTTP Status: 302 
{redirect_uri}?error=invalid_scope&error_description=Invalid scope: xxx&state=123456

Response Parameters

If the user logs in and authorizes successfully, the browser will redirect to the specified callback address, appending the Authorization Code and the original state value to the redirect_uri.

Parameter	Name	Required	Example	Description
access_token	Authorization token	Required	NObiKQS-cn8AWnZyIMkOvBgHIo8	Returned as a URL fragment, not a query parameter.
token_type	Token type	Required	Bearer	Fixed: Bearer
expires_in	Access token validity period	Required	7199	Validity period of the access ticket returned by the authorization server. Note: the validity period is in seconds.
scope	Authorization scope	Required	get_user_info	Fixed: get_user_info
state	Application state code	Optional	15924362	Client-side state value. Used by third-party applications to prevent CSRF attacks; returned unchanged in the callback after successful authorization.

Next step: Get User Info