diagrams/003-authorization-code.svg

<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="547px" preserveAspectRatio="none" style="width:965px;height:547px;" version="1.1" viewBox="0 0 965 547" width="965px" zoomAndPan="magnify"><defs><filter height="300%" id="f1fm9osekh1hgz" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="179" x="393" y="23.5352">Authorization Code Flow</text><rect fill="#FFEEEE" height="495.2832" style="stroke: #A80036; stroke-width: 1.0;" width="292" x="181" y="34.4883"/><rect fill="#AACCFF" filter="url(#f1fm9osekh1hgz)" height="240.8633" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="131" y="178.2871"/><rect fill="#11DD11" filter="url(#f1fm9osekh1hgz)" height="34.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="131" y="483.4609"/><rect fill="#FFBB44" filter="url(#f1fm9osekh1hgz)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="239" y="301.2188"/><rect fill="#AACCFF" filter="url(#f1fm9osekh1hgz)" height="240.8633" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="423" y="178.2871"/><rect fill="#FFBB44" filter="url(#f1fm9osekh1hgz)" height="112.9316" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="428" y="271.9082"/><rect fill="#11DD11" filter="url(#f1fm9osekh1hgz)" height="305.1738" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="814" y="212.5977"/><rect fill="#FFBB44" filter="url(#f1fm9osekh1hgz)" height="112.9316" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="819" y="271.9082"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="136" x2="136" y1="121.9766" y2="535.7715"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="244" x2="244" y1="121.9766" y2="535.7715"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="428" x2="428" y1="121.9766" y2="535.7715"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 5.0,5.0;" x1="819" x2="819" y1="121.9766" y2="535.7715"/><rect fill="#AACCFF" filter="url(#f1fm9osekh1hgz)" height="30.4883" style="stroke: #A80036; stroke-width: 1.5;" width="54" x="107" y="86.4883"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="40" x="114" y="107.0234">Client</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="112" x="185" y="119.0234">Resource Owner</text><ellipse cx="244" cy="48.4883" fill="#FF8888" filter="url(#f1fm9osekh1hgz)" rx="8" ry="8" style="stroke: #A80036; stroke-width: 2.0;"/><path d="M244,56.4883 L244,83.4883 M231,64.4883 L257,64.4883 M244,83.4883 L231,98.4883 M244,83.4883 L257,98.4883 " fill="none" filter="url(#f1fm9osekh1hgz)" style="stroke: #A80036; stroke-width: 2.0;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="76" x="387" y="119.0234">User Agent</text><ellipse cx="428" cy="89.4883" fill="#FF8888" filter="url(#f1fm9osekh1hgz)" rx="12" ry="12" style="stroke: #A80036; stroke-width: 2.0;"/><line style="stroke: #A80036; stroke-width: 2.0;" x1="416" x2="440" y1="103.4883" y2="103.4883"/><rect fill="#FFDDDD" filter="url(#f1fm9osekh1hgz)" height="30.4883" style="stroke: #A80036; stroke-width: 1.5;" width="156" x="739" y="86.4883"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacingAndGlyphs" textLength="142" x="746" y="107.0234">Authorization Server</text><rect fill="#AACCFF" filter="url(#f1fm9osekh1hgz)" height="240.8633" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="131" y="178.2871"/><rect fill="#11DD11" filter="url(#f1fm9osekh1hgz)" height="34.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="131" y="483.4609"/><rect fill="#FFBB44" filter="url(#f1fm9osekh1hgz)" height="29.3105" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="239" y="301.2188"/><rect fill="#AACCFF" filter="url(#f1fm9osekh1hgz)" height="240.8633" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="423" y="178.2871"/><rect fill="#FFBB44" filter="url(#f1fm9osekh1hgz)" height="112.9316" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="428" y="271.9082"/><rect fill="#11DD11" filter="url(#f1fm9osekh1hgz)" height="305.1738" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="814" y="212.5977"/><rect fill="#FFBB44" filter="url(#f1fm9osekh1hgz)" height="112.9316" style="stroke: #A80036; stroke-width: 1.0;" width="10" x="819" y="271.9082"/><polygon fill="#A80036" points="411,174.2871,421,178.2871,411,182.2871,415,178.2871" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="141" x2="417" y1="178.2871" y2="178.2871"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="20" x="160" y="173.5449">(A)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="141" x="184" y="173.5449">Directs or Redirects to</text><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="72" x="329" y="173.5449">/authorize</text><polygon fill="#A80036" points="802,208.5977,812,212.5977,802,216.5977,806,212.5977" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="433" x2="808" y1="212.5977" y2="212.5977"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="20" x="452" y="207.8555">(A)</text><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="72" x="476" y="207.8555">/authorize</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="250" x="552" y="207.8555">with [Client Identifier &amp; Redirection URI]</text><path d="M829,191.2871 L829,216.2871 L953,216.2871 L953,201.2871 L943,191.2871 L829,191.2871 " fill="#EEEEFF" filter="url(#f1fm9osekh1hgz)" style="stroke: #A80036; stroke-width: 1.0;"/><path d="M943,191.2871 L943,201.2871 L953,201.2871 L943,191.2871 " fill="#EEEEFF" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="103" x="835" y="208.8555">GET /authorize</text><polygon fill="#A80036" points="449,267.9082,439,271.9082,449,275.9082,445,271.9082" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="443" x2="818" y1="271.9082" y2="271.9082"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="455" y="267.166">(B)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="83" x="477" y="267.166">Initiate Login</text><polygon fill="#A80036" points="260,297.2188,250,301.2188,260,305.2188,256,301.2188" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="254" x2="427" y1="301.2188" y2="301.2188"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="266" y="296.4766">(B)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="68" x="288" y="296.4766">Login Page</text><polygon fill="#A80036" points="807,326.5293,817,330.5293,807,334.5293,811,330.5293" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="244" x2="813" y1="330.5293" y2="330.5293"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="259" y="325.7871">(B)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="240" x="281" y="325.7871">Authenticates and approves the Client</text><polygon fill="#A80036" points="444,380.8398,434,384.8398,444,388.8398,440,384.8398" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0; stroke-dasharray: 2.0,2.0;" x1="438" x2="813" y1="384.8398" y2="384.8398"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="19" x="454" y="380.0977">(C)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="223" x="477" y="380.0977">Redirects with [Authorization Code]</text><polygon fill="#A80036" points="147,415.1504,137,419.1504,147,423.1504,143,419.1504" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="141" x2="427" y1="419.1504" y2="419.1504"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="19" x="161" y="414.4082">(C)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="0" x="184" y="414.4082"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="62" x="184" y="414.4082">/callback</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="161" x="250" y="414.4082">with [Authorization Code]</text><path d="M8,397.8398 L8,422.8398 L122,422.8398 L122,407.8398 L112,397.8398 L8,397.8398 " fill="#EEEEFF" filter="url(#f1fm9osekh1hgz)" style="stroke: #A80036; stroke-width: 1.0;"/><path d="M112,397.8398 L112,407.8398 L122,407.8398 L112,397.8398 " fill="#EEEEFF" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="93" x="14" y="415.4082">GET /callback</text><polygon fill="#A80036" points="802,479.4609,812,483.4609,802,487.4609,806,483.4609" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="141" x2="808" y1="483.4609" y2="483.4609"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="20" x="156" y="478.7188">(D)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="364" x="184" y="478.7188">Authorization Code &amp; Redirection URI &amp; Client Credentials</text><path d="M829,462.1504 L829,487.1504 L934,487.1504 L934,472.1504 L924,462.1504 L829,462.1504 " fill="#EEFFEE" filter="url(#f1fm9osekh1hgz)" style="stroke: #A80036; stroke-width: 1.0;"/><path d="M924,462.1504 L924,472.1504 L934,472.1504 L924,462.1504 " fill="#EEFFEE" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="84" x="835" y="479.7188">POST /token</text><polygon fill="#A80036" points="147,513.7715,137,517.7715,147,521.7715,143,517.7715" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.0;" x1="141" x2="818" y1="517.7715" y2="517.7715"/><text fill="#000000" font-family="sans-serif" font-size="13" font-weight="bold" lengthAdjust="spacingAndGlyphs" textLength="18" x="157" y="513.0293">(E)</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="247" x="183" y="513.0293">Access Token [Optional Refresh Token]</text><!--
@startuml

title Authorization Code Flow
hide footbox
skinparam {
  ParticipantPadding 5
  BoxPadding 5
}

participant "Client"                as CL       #ACF
box #FEE
actor       "Resource Owner"        as RO       #F88
entity      "User Agent"            as UA       #F88
end box
participant "Authorization Server"  as AS       #FDD

|||
CL- ->UA:   <b>   (A)</b> Directs or Redirects to <b>/authorize</b>
activate CL #ACF
activate UA #ACF
UA->AS:   <b>   (A) <b>/authorize</b> with [Client Identifier & Redirection URI]
note right #EEF: <b>GET /authorize</b>

activate AS #1D1
|||
UA<- -AS: <b>(B)</b> Initiate Login
activate UA #FB4
activate AS #FB4
UA->RO: <b>(B)</b> Login Page
activate RO #FB4
RO->AS: <b>  (B)</b> Authenticates and approves the Client
deactivate RO

|||
UA<- -AS: <b> (C)</b> Redirects with [Authorization Code]
deactivate AS
deactivate UA
CL<-UA: <b>  (C)</b> <b>/callback</b> with [Authorization Code]
note left #EEF: <b>GET /callback</b>
deactivate UA
deactivate CL

|||
CL->AS: <b>  (D)</b>  Authorization Code & Redirection URI & Client Credentials
note right #EFE: <b>POST /token</b>
activate CL #1D1
CL<-AS: <b> (E)</b>  Access Token [Optional Refresh Token]
deactivate CL
deactivate AS

@enduml

PlantUML version 1.2019.06(Fri May 24 13:10:25 EDT 2019)
(GPL source distribution)
Java Runtime: Java(TM) SE Runtime Environment
JVM: Java HotSpot(TM) 64-Bit Server VM
Java Version: 1.8.0_202-b08
Operating System: Mac OS X
OS Version: 10.14.5
Default Encoding: UTF-8
Language: en
Country: CA
--></g></svg>