Bird
Raised Fist0

In the Authorization Code Flow, what is the primary role of the authorization server?

easy🧠 Conceptual Q1 of Q15
Rest API - Authentication and Authorization
In the Authorization Code Flow, what is the primary role of the authorization server?
ATo authenticate the user and issue an authorization code
BTo directly provide access tokens without user interaction
CTo store user data permanently
DTo refresh access tokens automatically
Step-by-Step Solution
Solution:
  1. Step 1: Understand the role of the authorization server

    The authorization server is responsible for authenticating the user and issuing an authorization code after successful login.
  2. Step 2: Differentiate from other roles

    It does not directly provide access tokens without the authorization code step, nor does it store user data or refresh tokens automatically.
  3. Final Answer:

    To authenticate the user and issue an authorization code -> Option A
  4. Quick Check:

    Authorization server role = Issue authorization code [OK]
Quick Trick: Authorization server issues code after user login [OK]
Common Mistakes:
MISTAKES
  • Confusing authorization server with resource server
  • Thinking access tokens are issued without code
  • Assuming server stores user data permanently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Rest API Quizzes