This chapter's focus is on explaining how OAuth 2.0, one of the most popular authorization protocols that is used today in many modern applications, can be implemented using the Oracle API Platform CS alongside Oracle Identity Cloud to enforce OAuth authorization policies to different API resources.
The chapter starts off by covering key authorization concepts such as OAuth Grants and its different Grant Flows and then continues to explain how to:
- Configure Oracle Identity Cloud (IDCS) as an OAuth 2.0 Authorization Server to issue JSON Web Tokens (JWT)
- Configure Oracle APIP CS API Gateway as an OAUTH 2.0 Resource Server to accept JWT's issued by IDCS
- Configure the OAuth 2.0 API Policy in Oracle's API Platform Management Service to enforce the presence of specific Scopes within the JWTs