OAUTH 2 Flows User-Agent Flow Server-Side Flow
{"Image DocumentName": "OAUTH 2 Flows User-Agent Flow Server-Side Flow", "Image ImageDescription": "For clients running inside a user-agent that can\u2019t maintain state over time. e.g. JavaScript based client apps. Server-Side Flow. For clients that are part of a server-side web application. e.g. Java/PHP client app. Native App Flow (not part of spec, but vendors implementing it) For mobile and desktop apps. Same as server-side flow with one exception: a special redirect_uri (=oob) e.g. Native mobile client app. Client Credentials Flow. For clients using application identity instead of end user identity to authenticate with authorization server. e.g. App to App connectivity. Assertion Flow. Client presents assertion (such as SAML) to authenticate with authorization server. e.g. Mobile app of SaaS app authenticating user with Enterprise credentials over SAML. Device Flow. For clients running on limited devices. e.g. TV and other SFF clients. Username and Password Flow. Client sends user\u2019s username/password to authenticate with the authorization server. User trusts the client to maintain security of it\u2019s password. e.g. clients leveraging password managers.", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}