Authorization code flow in Rest API - Mini Project: Build & Apply

Authorization Code Flow Simulation

📖 Scenario: You are building a simple simulation of the OAuth 2.0 Authorization Code Flow. This flow is used by many websites and apps to let users log in securely using another service, like Google or Facebook.In this project, you will create the basic steps of this flow using simple code to understand how the authorization code is requested, exchanged for a token, and then used to access user data.

🎯 Goal: Build a step-by-step simulation of the OAuth 2.0 Authorization Code Flow using simple REST API calls. You will create the initial authorization request, handle the authorization code, exchange it for an access token, and finally use the token to get user information.

📋 What You'll Learn

Create a dictionary to represent the client application details

Create a variable to hold the authorization code received

Write code to simulate exchanging the authorization code for an access token

Print the final access token and user info to show the flow works

💡 Why This Matters

🌍 Real World

OAuth 2.0 Authorization Code Flow is used by many apps and websites to let users log in securely without sharing passwords.

💼 Career

Understanding this flow is important for developers working on authentication, security, and integrating third-party login services.

1

Set up client application details

Create a dictionary called client_app with these exact entries: 'client_id': 'abc123', 'redirect_uri': 'https://example.com/callback', and 'scope': 'read_profile'.

Rest API

# Create the client_app dictionary with client_id, redirect_uri, and scope
# Your code here

Need a hint?

Use curly braces {} to create a dictionary with the exact keys and values.

2

Store the authorization code

Create a variable called authorization_code and set it to the string 'authcode123' to simulate receiving an authorization code from the authorization server.

Rest API

client_app = {
    'client_id': 'abc123',
    'redirect_uri': 'https://example.com/callback',
    'scope': 'read_profile'
}
# Create the authorization_code variable and assign 'authcode123'
# Your code here

Need a hint?

Just assign the string 'authcode123' to the variable authorization_code.

3

Exchange authorization code for access token

Create a dictionary called token_response that simulates the token server response with these exact entries: 'access_token': 'token456', 'token_type': 'Bearer', and 'expires_in': 3600. Use the authorization_code variable in a comment to show it is used in this step.

Rest API

client_app = {
    'client_id': 'abc123',
    'redirect_uri': 'https://example.com/callback',
    'scope': 'read_profile'
}
authorization_code = 'authcode123'
# Create token_response dictionary simulating token exchange using authorization_code
# Your code here

Need a hint?

Create a dictionary with the exact keys and values to represent the token response.

4

Print the access token and user info

Create a dictionary called user_info with these exact entries: 'id': 'user789' and 'name': 'Alice'. Then print the access_token from token_response and the user_info dictionary on separate lines.

Rest API

client_app = {
    'client_id': 'abc123',
    'redirect_uri': 'https://example.com/callback',
    'scope': 'read_profile'
}
authorization_code = 'authcode123'
# Using authorization_code to exchange for token
token_response = {
    'access_token': 'token456',
    'token_type': 'Bearer',
    'expires_in': 3600
}
# Create user_info dictionary and print access_token and user_info
# Your code here

Need a hint?

Create the user_info dictionary and use print() to show the access token and user info.