Examples of using The authorization server in English and their translations into Japanese
{-}
-
Colloquial
-
Ecclesiastic
-
Computer
-
Programming
The authorization server either grants or rejects the client's request based on the results of these checks.
Following is an example of a valid-token response from the authorization server.
The<authorization> element collects information to configure the authorization server for the authentication communication with other MobileFirst Server components.
For more information, see MobileFirst Server administration service to MobileFirst Server push service, and to the authorization server.
By leveraging Authlete APIs, the authorization server doesn't need to implement complicated logic to evaluate paramters in authorization/ token request, and make appropriate responses for those requests with the correct method.
After that, the authorization server is going to process OIDC authorization code flow since the values of scope and response_type are openid and code respectively.
MobileFirst Server administration service to MobileFirst Server push service, and to the authorization server The administration service communicates with the push service to request various push operations.
If an authorization code is used more than once, the authorization server MUST deny the request and SHOULD revoke(when possible) all tokens previously issued based on that authorization code.
The authorization server MUST implement CSRF protection for its authorization endpoint and ensure that a malicious client cannot obtain authorization without the awareness and explicit consent of the resource owner.
If the request is valid, the authorization server authenticates the resource owner and obtains an authorization decision(by asking the resource owner or by establishing approval via other means).
The authorization server is expected to make the following response(folded for readability) to the user agent(message 10).
If a value which is not checked in this configuration item is used as the value of the"display" request parameter, the authorization server returns an error.
Here we assume that the user agent recieves the redirection response form the authorization server. It would send the following request(folded for readability) to the client(message 11).
If the authorization server does not provide support for such clients or does not provide guidance with regard to their registration, the client SHOULD register each component as a separate client.
If a refresh token is compromised and subsequently used by both the attacker and the legitimate client, one of them will present an invalidated refresh token, which will inform the authorization server of the breach.