Mobile App Flow

[Scuottolinx]

Hi, I would need to run this flow:

• mobile application, requires access by username and password, for all scopes (read, write, delete, update)
• the server responds with the authorization token
• the app will always use that token to identify the person logged in

how could i configure this flow?

Thx a lot

[froozeify]

You could easily do that flow by using the password grant_type and scope to empty (by default it will allow all scopes)

With that, you'll have to store the access_token and refresh_token from the response

[Scuottolinx]

Thank you so much for the answer, I thought about it, but you confirmed it.

So, that's perfect, but what client_id do I give them? a public client_id? does it have to generate one per user? (as far as I understand I don't) thanks a lot

[froozeify]

Since it's a mobile app, you should probably use a authorization_code grant type as specified by OAuth

You'll have to generate your client_id from the command line