I need to secure access to an API that will be consumed by untrusted 3rd party service. My current investigations have lead me to using grant_type=“client_credentials” however this flow seems to be only for Machine to Machine (MTM) connections where the client is trusted. I can understand why: If I…

The main OAuth 2.0 specification covers four grant types and these can be split in two groups depending if there’s an end-user involved or not: implicit, authorization code and resource owner password credentials for the cases where the client applications will access the resources on behalf of an…

Allow untrusted 3rd Party Service to access my API (MTM)

Get Help

system Closed July 17, 2019, 1:53pm 6

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Connecting customers to my API? Get Help management-api , clients	3	1146	November 20, 2023
Authenticate third-party apps Get Help jwt , auth0 , app_metadata , machine-to-machine	7	3344	October 1, 2022
Allow specific outside customers access to our API server with m2m machine to machine token Get Help api , m2m , m2m-tokens	4	3243	May 4, 2021
Authorizing third party API access with JWT JWT.io jwt , auth0 , api	2	3234	March 31, 2022
Allow third party access to API Get Help	4	4590	January 29, 2022

Allow untrusted 3rd Party Service to access my API (MTM)

Related topics