Micro Authentication Service

oAuth2 process:

1. OAuth2 application request token acquiring server (for credentials)
2. Carrying the token service request (header)
3. Service requests oAuth2 read token and server authentication token, and obtain user information
4. Application verify user rights

JWT (Json Web Token)

• Self-contained (without requesting oAuth2 server can verify the token)
• Extensible (token may include extended information)

OAuth2 License Type:

• Password authorization
• Authorize client credentials
• Authorization Code Authorization
• Implicit Authorization

Authorization code authorization process (third-party login, user login B A):

1. User access to A, B is A redirected to the login page
2. User login B, B request to the server to obtain an authorization code oAuth
3. B redirect users to A's callback address (carrying authorization code)
4. A server authentication request authorization code oAuth
5. A token is returned to the server oAuth