how does OAuth v2.0 pratically work?

[sidd-harth]

Hi guys, I have an BaaS back-end and an sample webpage. I created a proxy with a resource and added OAuth v.2.0(client credentials grant type) to it successfully.

When I open it in console and add header with <access_token> I'm getting a 200 OK.

Now how will this be useful for my webpage? Will my web-page ask for any credentials when I load it?

I'm kind of new to this,so kindly tell me how can I use this?

[#2 · Accepted solution]

OAuth protocol has been well-documented at Apigee docs. I would suggest to go through following links. First link is for "client credential" grant type in general. Second link is OAuth support available for BaaS applications.

http://apigee.com/docs/api-services/tutorials/secure-calls-to-your-api-through-oauth-client-credenti...

http://apigee.com/docs/app-services/content/authenticating-users-and-application-clients