7 lines
No EOL
535 B
Text
Executable file
7 lines
No EOL
535 B
Text
Executable file
== Authorization API
|
|
|
|
The Authorization API provides a UMA-compliant endpoint for obtaining authorization data from the server, where the authorization data represents the result of the evaluation
|
|
of all permissions and authorization policies associated with the resources being requested.
|
|
|
|
Unlike the Protection API, any client application can access the Authorization API endpoint, which requires a special OAuth2 access token called *Authorization API Token* or *AAT*.
|
|
In UMA, a AAT is just a token with a scope *uma_authorization*. |