Implicit Grant

tags :

Grant Types or OAuth flow in OAuth2 #

Description #

• A simplified Authorization flow for client-side applications, returning the Access Token immediately without an extra authorization code exchange step.

Use Cases #

• Single-page applications (SPA)
• Mobile apps
• In Public Client

Security #

• Less secure, exposes the access token in the URL, vulnerable in non-HTTPS environments.

Implementing it in Identity Domain in OCI #

Get the domain URL #

append “oauth2/v1/authorize” to the URL #

https://domainurl:port/oauth2/v1/authorize

add query parameters #

1. client_id
2. response_type=token
3. redirect_uri

Example #