How to Manage the Protected AEM Resources through OAuth 2.0 | AEM Community Blog Seeding

[kautuk_sahni]

How to Manage the Protected AEM Resources through OAuth 2.0 by Stories by Albin Issac on Medium

Abstract

This tutorial explains how to use Adobe Granite OAuth 2.0 Server functionalities to grant resource access to external clients in AEM(Adobe Experience Manager).
The OAuth 2.0 protocol allows the users to grant a third-party web site or application access to the user's protected resources without necessarily revealing their long term credentials or even their identity.

OAuth 2.0 allows clients to access user’s (resource owner’s) resources on resource servers via authorization servers in a secure, reliable, and efficient manner.
Adobe granite OAuth 2.0 server implementation(com.adobe.granite.oauth.server) provides the support for OAuth 2.0 server functionalities in AEM.
Access tokens are the thing that applications use to make API requests on behalf of a user. The access token represents the authorization of a specific application to access specific parts of a user’s data. The external application should receive the access token to access the protected user resources from AEM.

Grants
The OAuth 2.0 specification describes a number of grants (“methods”) for a client application to acquire an access token (which represents a user’s permission for the client to access their data) which can be used to authenticate a request to a protected resource.
The Granite OAuth Server supports the below grant types
1. Authorization Code
2. Refresh Token
3. JWT Bearer Token

Read Full Blog

How to Manage the Protected AEM Resources through OAuth 2.0

Q&A

Please use this thread to ask the related questions.