forked from jeansfish/RFC6749.zh-cn
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
3 changed files
with
124 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,115 @@ | ||
| 目录 | ||
| ================ | ||
| - [首页](index.md) | ||
| - 1. 介绍 | ||
| - 1.1. 角色 | ||
| - 1.2. 协议流程 | ||
| - 1.3. 授权许可 | ||
| - 1.3.1. 授权码 | ||
| - 1.3.2. 隐式授权 | ||
| - 1.3.3. 资源所有者密码凭据 | ||
| - 1.3.4. 客户端凭据 | ||
| - 1.4. 访问令牌 | ||
| - 1.5. 刷新令牌 | ||
| - 1.6. TLS版本 | ||
| - 1.7. HTTP重定向 | ||
| - 1.8. 互操作性 | ||
| - 1.9. 符号约定 | ||
| - 2. 客户端注册 | ||
| - 2.1. 客户端类型 | ||
| - 2.2. 客户端标识 | ||
| - 2.3. 客户端身份验证 | ||
| - 2.3.1. 客户端密码 | ||
| - 2.3.2. 其他身份验证方法 | ||
| - 2.4. 未注册的客户端 | ||
| - 3. 协议端点 | ||
| - 3.1. 授权端点 | ||
| - 3.1.1. 响应类型 | ||
| - 3.1.2. 重定向端点 | ||
| - 3.2. 令牌端点 | ||
| - 3.2.1. 客户端身份验证 | ||
| - 3.3. 访问令牌范围 | ||
| - 4. 获得授权 | ||
| - 4.1. 授权码许可 | ||
| - 4.1.1. 授权请求 | ||
| - 4.1.2. 授权响应 | ||
| - 4.1.3. 访问令牌请求 | ||
| - 4.1.4. 访问令牌响应 | ||
| - 4.2. 隐式许可 | ||
| - 4.2.1. 授权请求 | ||
| - 4.2.2. 访问令牌响应 | ||
| - 4.3. 资源拥有者密码凭据许可 | ||
| - 4.3.1. 授权请求和响应 | ||
| - 4.3.2. 访问令牌请求 | ||
| - 4.3.3. 访问令牌响应 | ||
| - 4.4. 客户端凭证许可 | ||
| - 4.4.1. 授权请求和响应 | ||
| - 4.4.2. 访问令牌请求 | ||
| - 4.4.3. 访问令牌响应 | ||
| - 4.5. 扩展许可 | ||
| - 5. 颁发访问令牌 | ||
| - 5.1. 成功响应 | ||
| - 5.2. 错误响应 | ||
| - 6. 刷新访问令牌 | ||
| - 7. 访问受保护资源 | ||
| - 7.1. 访问令牌类型 | ||
| - 7.2. 错误响应 | ||
| - 8. 可扩展性 | ||
| - 8.1. 定义访问令牌类型 | ||
| - 8.2. 定义新的端点参数 | ||
| - 8.3. 定义新的授权许可类型 | ||
| - 8.4. 定义新的授权端点响应类型 | ||
| - 8.5. 定义其他错误代码 | ||
| - 9. 本机应用程序 | ||
| - 10. 安全性考虑 | ||
| - 10.1. 客户端身份验证 | ||
| - 10.2. 客户端仿冒 | ||
| - 10.3. 访问令牌 | ||
| - 10.4. 刷新令牌 | ||
| - 10.5. 授权码 | ||
| - 10.6. 授权码重定向URI操纵 | ||
| - 10.7. 资源拥有者密码凭据 | ||
| - 10.8. 请求机密性 | ||
| - 10.9. 确保端点真实性 | ||
| - 10.10. 凭据猜测攻击 | ||
| - 10.11. 钓鱼攻击 | ||
| - 10.12. 跨站请求伪造 | ||
| - 10.13. 点击劫持 | ||
| - 10.14. 代码注入和输入验证 | ||
| - 10.15. 自由重定向 | ||
| - 10.16. 隐式流程中滥用访问令牌假冒资源所有者 | ||
| - 11. IANA考量 | ||
| - 11.1. OAuth访问令牌类型注册表 | ||
| - 11.1.1. 注册模板 | ||
| - 11.2. OAuth参数注册表 | ||
| - 11.2.1. 注册模板 | ||
| - 11.2.2. 初始注册表内容 | ||
| - 11.3. OAuth授权端点响应类型注册表 | ||
| - 11.3.1. 注册模板 | ||
| - 11.3.2. 初始注册表内容 | ||
| - 11.4. OAuth扩展错误注册表 | ||
| - 11.4.1. 注册模板 | ||
| - 12. 参考文献 | ||
| - 12.1. 规范性文献 | ||
| - 12.2. 参考性文献 | ||
| - 附录A. 增强巴科斯-诺尔范式（ABNF）语法 | ||
| - A.1. “client_id”语法 | ||
| - A.2. “client_secret”语法 | ||
| - A.3. “response_type”语法 | ||
| - A.4. “scope”语法 | ||
| - A.5. “state”语法 | ||
| - A.6. “redirect_uri”语法 | ||
| - A.7. “error”语法 | ||
| - A.8. “error_description”语法 | ||
| - A.9. “error_uri”语法 | ||
| - A.10. “grant_type”语法 | ||
| - A.11. “code”语法 | ||
| - A.12. “access_token”语法 | ||
| - A.13. “token_type”语法 | ||
| - A.14. “expires_in”语法 | ||
| - A.15. “username”语法 | ||
| - A.16. “password”语法 | ||
| - A.17. “refresh_token”语法 | ||
| - A.18. 端点参数语法 | ||
| - 附录B. 使用application/x-www-form-urlencoded媒体类型 | ||
| - 附录C. 致谢 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters