Contents

Introduction to API Gateway OAuth 2.0 server

Overview

OAuth 2.0 concepts

OAuth 2.0 example workflow

API Gateway OAuth features

API Gateway OAuth scopes

OAuth 2.0 authentication flows

Further information

Set up API Gateway OAuth 2.0

Overview

Enable OAuth 2.0 management

Import client applications

Migrate client applications

Upgrade API Gateway configuration

Manage OAuth 2.0 client applications

Overview

Manage registered client applications

Run the sample client applications

Manage access tokens and authorization codes

Manage OAuth scopes

Relational database-backed Client Application Registry

Generate a certificate and private key for a client application

API Gateway OAuth 2.0 authentication flows

Overview

Authorization code (or web server) flow

Implicit grant (or user agent) flow

Resource owner password credentials flow

Client credentials grant flow

JWT flow

Revoke token

Token information service