RFC 6749 token requests

Four client_credentials requests with scopes in the form resource.scope, run live on every load.

← All implementations ↻ Run again

1. One resource, one scope (demo-api.read)

a

Request access token

POST /oauth/v2/oauth-token with scope demo-api.read

1562.7 ms ✕ 401

POST https://purple.faai-poc.de/oauth/v2/oauth-token

request body
{
  "grant_type": "client_credentials",
  "scope": "demo-api.read"
}
response body
{
  "error": "invalid_client"
}
b

Call demo-api

Bearer token attached as Authorization header

skipped
Skipped — no access token from the previous step.

2. One resource, multiple scopes (demo-api.read demo-api.write)

a

Request access token

POST /oauth/v2/oauth-token with scope demo-api.read demo-api.write

1565.4 ms ✕ 401

POST https://purple.faai-poc.de/oauth/v2/oauth-token

request body
{
  "grant_type": "client_credentials",
  "scope": "demo-api.read demo-api.write"
}
response body
{
  "error": "invalid_client"
}
b

Call demo-api

Bearer token attached as Authorization header

skipped
Skipped — no access token from the previous step.

3. Multiple resources, same scope (demo-api.read demo-api2.read)

a

Request access token

POST /oauth/v2/oauth-token with scope demo-api.read demo-api2.read

1571.1 ms ✕ 401

POST https://purple.faai-poc.de/oauth/v2/oauth-token

request body
{
  "grant_type": "client_credentials",
  "scope": "demo-api.read demo-api2.read"
}
response body
{
  "error": "invalid_client"
}
b

Call demo-api

Bearer token attached as Authorization header

skipped
Skipped — no access token from the previous step.

4. Multiple resources, different scopes (demo-api.read demo-api2.write)

a

Request access token

POST /oauth/v2/oauth-token with scope demo-api.read demo-api2.write

1555.1 ms ✕ 401

POST https://purple.faai-poc.de/oauth/v2/oauth-token

request body
{
  "grant_type": "client_credentials",
  "scope": "demo-api.read demo-api2.write"
}
response body
{
  "error": "invalid_client"
}
b

Call demo-api

Bearer token attached as Authorization header

skipped
Skipped — no access token from the previous step.