

Refresh token - a special token which can be used to retrieve a new ID / refresh token.Client credentials - the client ID and secret obtained from this grant is intended for clients acting on their own behalf.Resource owner password credentials - the client obtains the end-user username and password and passes them to the token endpoint use of this grant should be limited to highly-trusted clients or devices.Authorization code - the code obtained from the authorisation endpoint which the server uses to look up the granted permission or consent.The token endpoint of the cidaas server accepts the following grant types: The grant is a recognized credential which lets the client access the requested resource (web API) or user identity. Requesting tokens with a grantĬlients obtain identity and access tokens from the token endpoint in exchange for an OAuth 2.0 grant.
