FNCY Login

Developed through standard OAuth2 specification (RFC 6749).

OAuth 2.0 Terminology

Terminology	Description
Authentication	Step to verify whether a client is qualified for authentication and access.
Authorization	Authorization, granting access to resources, and upon completion of authorization, an Access Token containing access to resources is granted to the client.
Access Token	Passes resource server to Token with the expiration period used to acquire the protected resources of the resource owner.
Refresh Token	Token that is used to renew when the Access Token expires, and generally has a longer expiration period than the Access Token.

OAuth 2.0 Key API Parameter

Parameter	Description
client_id client_secret	This information is used to prove the client's credentials and is used to verify the client when linking to the permission server.
redirect_url	The URL setting information where the authorization server will send the response to the request.
response_type	Authorization method when requesting authorization consent. Typically takes one of the following values · code: Authorization Code Grant · token: Implicit Grant
grant_type	Sets the authorization method for access token requests. Typically uses one of the values below · authorization_code: Authorization Code Grant · password: Resource Owner Password Credentials Grant · client_credentials: Client Credentials Grant
code	Access Token is used in the Authorization Code Grant method when requested.

FNCY Login Process

/v1/oauth2/authorize	GET	-	Request FNCY Authorization Code
/v1/oauth2/token	POST	json	Request Token Issuance

Authorization Code Grant Type Method

1. The client passes the client ID, redirect URI, and response type to FNCY authentication server with a parameter as code. After successful authentication, the FNCY authorization code is sent to the client.

2. After successfully receiving the FNCY authorization code, the client requests an additional access token from the FNCY certifier using the FNCY authorization code. The required parameters are Client ID, Client Password, Redirect URI, and Authentication Type.

3. Finally, uses the access token received from FNCY authentication server to send user data to the resource server.