Ouvert Fermé

Token Generation: Moving the user details to Authorization #7072


User avatar
0
Karthigeyan créé

Hi Team,

Currently for the Token generation (IdentityServer), we are passing the information like "client_id, client_secrets, username, password" via body of "urlencoded" format (as per the ABP framework). May I know, is there any way we can pass these details via "Authorization" and also would like to know can we achieve the same by only passing the "Username" and "Password" via "Authorization" instead of sending client_id and cilent_secret

Thanks, Karthigeyan R


1 Réponse (s)
  • User Avatar
    0
    maliming créé
    Équipe d'assistance Fullstack Developer

    hi

    This is designed by OAuth2, You can't do that.

    See https://datatracker.ietf.org/doc/html/rfc6749#section-4.3.2 https://www.oauth.com/oauth2-servers/access-tokens/password-grant/

Made with ❤️ on ABP v8.2.0-preview Updated on mars 25, 2024, 15:11