Skip to content

OAuth Workflow

Primary Learning Resources

There are four flows (called grant types) to obtain the resource ownerโ€™s permission (technically calledย access token):ย authorization code,ย implicit,ย resource owner password credentialsย andย client credentials.

OAuth Testing

Go back to the trusty HackTricks OAuth to Account takeover - HackTricks