OAuth client credentials flow

🔥More exclusive content: https://productioncoder.com/you-decid...
Twitter:   / _jgoebel  
Website: https://jangoebel.com
Blog: https://productioncoder.com

00:00 What is the OAuth client credentials flow?
00:54 OAuth client credentials walkthrough
03:05 conclusion

The OAuth client credentials flow was primarily designed for machine to machine communication (e.g for service account). It is sometimes also referred to as two-legged OAuth because there is no natural person involved. The idea is that the application exchanges a client id and a secret for an access token. Since no user is sitting in between, it does not make much sense to also request a refresh token. In fact it is even better for the authorization server to not send a refresh token because then access can be more easily revoked if needed.