Last modified by messines on 2021/06/08 17:32
From version 17.6
edited by messines
on 2020/09/15 11:31
Change comment: There is no comment for this version
To version 21.1
edited by messines
on 2021/04/26 11:51
Change comment: There is no comment for this version

Summary

Details

Page properties
Title
... ... @@ -1,1 +1,1 @@
1 -Authenticating with your OIDC client and fetch collab user info
1 +2. Authenticating with your OIDC client and fetch collab user info
Content
... ... @@ -48,9 +48,7 @@
48 48  * **team **(optional)**: **This scope is like the group scope lets your app identify the permissions of the user, but by identifying what collabs the user has access to and with what roles.
49 49  * **clb.wiki.read **(optional): access to GET Collab API
50 50  * **clb.wiki.write** (optional): access to DELETE/PUT/POST Collab API
51 -* **clb.drive:read **(optional): access to GET Drive API
52 -* **clb.drive:write** (optional): access to DELETE/PUT/POST Drive API
53 -* **collab.drive **(optional): former scope, should be use if clb.drive is not enought
51 +* **collab.drive **(optional): access to GET/POST/PUT/DELETE drive API
54 54  * **offline_access **(optional)**: **provide refresh token
55 55  
56 56  {{info}}
... ... @@ -71,7 +71,7 @@
71 71  === Access Token Request ===
72 72  
73 73  (% class="wikigeneratedid" id="HRequest-1" %)
74 -Now that your app has the **authorization** **code** for a user, it can fetch the user access token
72 +Now that your app has the **authorization** **code** for a user, it can fetch the user ID Token and Access Token
75 75  
76 76  ==== Request ====
77 77  
... ... @@ -109,7 +109,7 @@
109 109  }
110 110  )))
111 111  
112 -Your app gets a response containing the **access token** and other information.
110 +Your app gets a response containing the **access token**, the **refresh token,** the **id token **and other information. The ID Token should be use by developer on their backend to read user informations such as username, first name, last name etc. The ID Token should be use internally, into your app only, the app which triggered the authentication. The access token will be use to reach APIs, the access token can be see as a card to access an ATM. ID Token is for Authentication, Access token is for Authorization. Refresh token is to re-ask a valid access token after expiration.
113 113  
114 114  == Access user info ==
115 115