Child Item

Redirect URI documentation incomplete for code flow

The process of using the redirect URI is not fully explained. There is no mention of which method will be used to call the URI (POST, GET, etc.) and there is no explanation of which parameters should be expected upon successful completion of the code flow. I was expecting to see an example of the incoming request. I'm currently guessing at how it should work.

Find more posts tagged with

API

Abuse

Accepted answers

Greg-DB

@FrustratedUser3 Thanks for the feedback!

All comments

Здравко

Hi @FrustratedUser3,

If you mean callback query (redirect URI), after confirmation by user, ( it's NOT a call!!! ) GET method is in use. For code flow, there is mandatory 'code' parameter and optional 'state' parameter (appears when/if set in auth URL). Further you need to finish the flow with call to /oauth2/token where you get the flow' results (access token, optional refresh token, different IDs, etc.). 😉 That's it.

Hope this helps.

FrustratedUser3

I was pointing out that the documentation is incomplete. The state variable is mentioned, the code variable is implied, and the http VERB is not referenced. This needs to be added to the documentation:

After the user presses allow during the code flow process, the browser sends a request to the redirect URI using the GET verb with the following query parameters:
* code: A code that ...
* state: An optional variable ...

Greg-DB

@FrustratedUser3 Thanks for the feedback!