FNCY Login

Developed through standard OAuth2 specification (RFC 6749).

OAuth 2.0 Terminology

TerminologyDescription

Authentication

Step to verify whether a client is qualified for authentication and access.

Authorization

Authorization, granting access to resources, and upon completion of authorization, an Access Token containing access to resources is granted to the client.

Access Token

Passes resource server to Token with the expiration period used to acquire the protected resources of the resource owner.

Refresh Token

Token that is used to renew when the Access Token expires, and generally has a longer expiration period than the Access Token.

OAuth 2.0 Key API Parameter

ParameterDescription

client_id

client_secret

This information is used to prove the client's credentials and is used to verify the client when linking to the permission server.

redirect_url

The URL setting information where the authorization server will send the response to the request.

response_type

Authorization method when requesting authorization consent.

Typically takes one of the following values

· code: Authorization Code Grant

· token: Implicit Grant

grant_type

Sets the authorization method for access token requests.

Typically uses one of the values below

· authorization_code: Authorization Code Grant

· password: Resource Owner Password Credentials Grant

· client_credentials: Client Credentials Grant

code

Access Token is used in the Authorization Code Grant method when requested.

FNCY Login Process

/v1/oauth2/authorize

GET

-

Request FNCY Authorization Code

/v1/oauth2/token

POST

json

Request Token Issuance

Authorization Code Grant Type Method

  1. The client passes the client ID, redirect URI, and response type to FNCY authentication server with a parameter as code. After successful authentication, the FNCY authorization code is sent to the client.

  2. After successfully receiving the FNCY authorization code, the client requests an additional access token from the FNCY certifier using the FNCY authorization code. The required parameters are Client ID, Client Password, Redirect URI, and Authentication Type.

  3. Finally, uses the access token received from FNCY authentication server to send user data to the resource server.

Last updated