RFC 6749 token requests

Four client_credentials requests with scopes in the form resource.scope, run live on every load.

← All implementations ↻ Run again

3. Multiple resources, same scope (demo-api.read demo-api2.read)

a

Request access token

POST /oauth/v2/oauth-token with scope demo-api.read demo-api2.read

1560.6 ms ✕ 401

POST https://purple.faai-poc.de/oauth/v2/oauth-token

request body 
{
  "grant_type": "client_credentials",
  "scope": "demo-api.read demo-api2.read"
}
response body 
{
  "error": "invalid_client"
}
b

Call demo-api

Bearer token attached as Authorization header

skipped
Skipped — no access token from the previous step.