OAuth 2.0 Authorization Code Flow 

Authentication 

Email login Password 

Email login Password username email password WHERE email = ? AND password = ? 

Email login Password username email password WHERE email = ? AND password = ? hi {username} login failed 

Delegated Authorization with OAuth 2.0 

https://blog.yorkxin.org/2013/09/30/oauth2-4-1-auth-code-grant-flow.html 

login with google Email Password twjug-lite.com accounts.google.com login 

login with google Email Password twjug-lite.com accounts.google.com login No Yes 你同意 TWJUG lite 使 用 OOO XXX 嗎？ accounts.google.com 

login with google Email Password twjug-lite.com accounts.google.com login No Yes accounts.google.com twjug-lite.com/callback loading ... xxx.google.com 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 

login with google Email Password twjug-lite.com accounts.google.com login Yes accounts.google.com twjug-lite.com/callback loading ... xxx.google.com Client Authorization Sserver Resource Server User-Agent, a.k.a. 瀏覽器 Consent Resource Owner 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 

RE: 重零開始的 OAuth Flow 細節⽣活 

login with google Email Password twjug-lite.com accounts.google.com login No Yes accounts.google.com 1 response_type: code redirect_uri: twjut-lite.com/callback go to authorization server 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 

login with google Email Password twjug-lite.com accounts.google.com login No Yes accounts.google.com twjug-lite.com/callback loading ... 1 2 response_type: code redirect_uri: twjut-lite.com/callback go to authorization server Back to redirect URI with authorization code 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 

login with google Email Password twjug-lite.com accounts.google.com login No Yes accounts.google.com twjug-lite.com/callback loading ... 1 2 3 response_type: code redirect_uri: twjut-lite.com/callback go to authorization server Back to redirect URI with authorization code Exchange authorization code for access token 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 

login with google Email Password twjug-lite.com accounts.google.com login No Yes accounts.google.com twjug-lite.com/callback loading ... 1 2 xxx.google.com 3 4 response_type: code redirect_uri: twjut-lite.com/callback go to authorization server Back to redirect URI with authorization code Exchange authorization code for access token Talk to resource server with access token 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 

動⼿做看看 https://auth0.com/docs/api-auth/tutorials/authorization-code-grant 

login with google Email Password twjug-lite.com accounts.google.com login 1 client_id: xxxx response_type: code redirect_uri: twjut-lite.com/callback go to authorization server 0 向 OAuth Provider 註冊你的 Client 取得 client_id, client_secret 

Email Password accounts.google.com login No Yes accounts.google.com twjug-lite.com/callback loading ... 2 Back to redirect URI with authorization code Exchange authorization code for access token 你同意 TWJUG lite 使 用 OOO XXX 嗎？ 3