OAuth 2.0 - Client Credentials

The client credentials can be used as an authorization grant when the client is the resource owner, or when the authorization scope is limited to protected resources under the control of the client.

• The client requests an access token only with the help of client credentials.

• The client credentials authorization flow is used to acquire access token to authorize API requests.

• Using client credentials authorization, access token which is acquired, only grants permission for your client application to search and get catalog documents.

The following figure depicts the Client Credentials Flow.

The flow illustrated in the above figure consists of the following steps −

Step 1 − The client authenticates with the authorization server and makes a request for access token from the token endpoint.

Step 2 − The authorization server authenticates the client and provides access token if it's valid and authorized.

The following table lists the concepts of Client Credentials.