Rest API - Authentication and Authorization
Which of the following is the correct OAuth 2.0 flow step to get an access token?
Which of the following is the correct OAuth 2.0 flow step to get an access token?
easy📝 Syntax Q12 of Q15
Step-by-Step Solution
Solution:
Step 1: Identify OAuth 2.0 token exchange step
The client sends the authorization code to the authorization server to exchange it for an access token.Step 2: Eliminate incorrect options
Client sends password directly to resource server is wrong because passwords are not sent directly. Resource server sends access token to client without request is wrong because tokens are sent after request. Client sends refresh token to user is wrong because refresh tokens are sent to the authorization server, not the user.Final Answer:
Client sends authorization code to the authorization server -> Option BQuick Check:
Authorization code sent to server = Step to get access token [OK]
Quick Trick: Authorization code sent to server to get token [OK]
Common Mistakes:
MISTAKES- Sending password instead of authorization code
- Expecting tokens without request
- Confusing refresh token recipient
Master "Authentication and Authorization" in Rest API
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Rest API Quizzes