oAuth2 API

Version 1.0.0

API name: auth-server

Scope "openid"

You don't need to subscribe to this API. This is implicit by using a scope that use client-credential flow as it the case for all our scopes.

Path: https://api.scalexpert.societegenerale.com/baas/prod/auth-server/api/v1

Request access token or id token

post

General

This endpoint implements the requirements described in the following related documents OAuth 2.0 RFC chapter.

It allows a client application to retrieve:

• An access token to access BaaS AS /oauth2/userinfoendpoint.
• A refresh token to ease future access token retrieval.
• An id token containing basic authenticated end-user information.

Access token and id token are delivered as JSON Web Tokens (JWT). The access token is encrypted, the id Token is signed.

formData

grant_typeanyRequired

Grant type. available values: authorization_code or refresh_token.

codeanyOptional

Authorization code delivered during the authorize flow. For authorization_code grant only.

redirect_urianyOptional

Client application redirect uri. Only valid for authorization_code grant type.

refresh_tokenanyOptional

Refresh token delivered during the authorize flow. Only for refresh_token grant type.

scopeanyOptional

Space separated list of scopes. For refresh_token grant, list can be a subset of the scope list for which the refresh token was, initially, issued.

Header parameters

AuthorizationanyRequired

Basic authorization header with base 64 encoded value of "clientID:clientSecret"

Responses

post

HTTPcURLJavaScriptPython

POST /baas/prod/auth-server/api/v1/oauth2/token HTTP/1.1
Host: api.scalexpert.societegenerale.com
Accept: */*

No content

Download swagger file:

19KB

swagger_baas-as_1.0.2.yaml

swagger auth-server API

See samples codes here

Link to developer portal documentation:

Consumer Portal