UPBOND Login 3.0 Documentation
CtrlK
  • 🏠Home
  • Learn The Basics
    • Identity Fundamentals
      • Introduction to Identity and Access Management (IAM)
      • Introduction to Login 3.0
      • Authentication vs Authorization
      • Glossary
    • Login 3.0 Overview
      • Create Tenants
      • Create Applications
        • Register Single-Page Web Applications
        • Register Regular Web Applications
        • Register Machine-to-Machine Applications
        • Configure an Identity Provider in Access Gateway
  • Configure Login 3.0
    • Tenant Settings
      • Signing Keys
        • Rotate Signing Keys
        • Revoke Signing Keys
        • View Signing Certificates
      • Enable Single Sign-On for Tenants
    • Applications in Login 3.0
      • Application Settings
      • Credential Settings
      • Application Grant Types
      • Update Grant Types
      • Revoke Access to APIs Using Application Grants
      • Signing Algorithms
      • Change Application Signing Algorithms
      • Rotate Credentials
      • Rotate Client Secrets
      • Configure Applications with OIDC Discovery
      • Remove Applications
      • Test Application Locally
      • Enable Single Sign-On Integrations for Applications
    • APIs
      • API Settings
    • Scopes
      • API Scopes
      • OpenID Connect Scopes
      • Sample Use Cases: Scopes and Claims
  • Plan and Design
    • Authentication and Authorization Flows
      • Which OAuth 2.0 Flow Should I Use?
      • Authorization Code Flow
        • Add Login Using the Authorization Code Flow
        • Call Your API Using the Authorization Code Flow
      • Authorization Code Flow with Proof Key for Code Exchange
        • Add Login Using the Authorization Code Flow with PKCE
        • Call Your API Using the Authorization Code Flow with PKCE
      • Client Credentials Flow
        • Call Your API Using the Client Credentials Flow
      • Implicit Flow with Form Post
        • Mitigate Replay Attacks When Using the Implicit Flow
        • Add Login Using the Implicit Flow with Form Post
      • Hybrid Flow
        • Call Your API Using the Hybrid Flow
    • Architecture Scenarios
      • Business to Customer
        • Architecture (B2C)
        • Provisioning (B2C)
        • Authentication (B2C)
        • Branding (B2C)
        • Deployment Automation (B2C)
        • Quality Assurance (B2C)
        • Profile Management (B2C)
        • Authorization (B2C)
        • Logout (B2C)
        • Operations (B2C)
        • Launch Preparation
          • Tenant Check (B2C)
          • Testing Complete (B2C)
          • Operations Readiness (B2C)
          • Compliance Readiness (B2C)
          • Support Readiness (B2C)
          • Launch Day Preparation (B2C)
  • APIs
    • Authentication APIs
      • Introduction
      • Login
      • Logout
      • Social Authentication Providers
      • Build Custom Userinfo (Resource) API
    • User Management APIs
      • Account Withdrawal
      • Email Address Management
    • Authorization APIs
      • Authorize Application
      • Authorization Code Flow
      • Authorization Code Flow with PKCE
      • Device Authorization Flow
      • Client Credential Flow
      • Implicit Flow
      • Refresh Token
      • Revoke Refresh Token
    • Errors
      • Standard Error Responses
      • POST /oauth/revoke
      • POST /oauth/access_token
  • FAQ & Troubleshooting
    • Supported Browser Versions
    • Common Issues and Resolutions
    • Reporting Bugs and Issues
  • Community
    • 🖐️Connect with us
Powered by GitBook
On this page

Was this helpful?

  1. APIs

Authorization APIs

Authorize ApplicationAuthorization Code FlowAuthorization Code Flow with PKCEDevice Authorization FlowClient Credential FlowImplicit FlowRefresh TokenRevoke Refresh Token
PreviousEmail Address ManagementNextAuthorize Application

Was this helpful?