, Oauth2
:
client Resource Server . Oauth2 client , , . ( javascript, REST API API- Backback ( Resource Server). Facebook- /JS-, , API Facebook . API- client Facebook Resource Server)
:
confidential, public , client_secret . (, AngularJS client_secret, " " , client public.)
:
Oauth2 Authorization Grant Types.
:
client authorization code, authorization code access token. . , client ( Resource-owner password based).
:
public client_type. client access token .
:
, client Resource Server. API- . ( API- Javascript, client_secret, Implicit ). Facebook Google .. Authorization Grant, API- .
:
. , .
URI:
, Redirect URI's, authorization code Implicit ( Client Credentials, -, , ).
URI , Resource Server , access token. , Facebook . developers.facebook.com (, django-oauth-toolkit), Redirect URI.
Redirect URI - . ", Facebook, URI". , Redirect URI - https://your_domain_name.com/token/facebook/, Facebook Redirect URI Oauth2 access token GET, https://your_domain_name.com/token/facebook/?token=some_long_string&some=other_parameters.