Client credentials
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
use the flow for service-to-service calls.
Planned topics
- No user is involved: a service proves itself with its own client ID and secret.
- It gets an access token for its own permissions.
- Use it for back-end jobs, such as Shop calling an internal service.
- Keep the client secret in a secret store, not in source control.
- If a user is acting, use authorization code instead.
Draft outline details
Demonstration
one request: POST /token with grant_type=client_credentials and the client's credentials.
Check your understanding
When is client credentials the right flow?
Show answer
Machine-to-machine, when no user is involved.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.