ballerina/oauth2

Represents the client OAuth2 provider, which generates OAuth2 tokens. This supports the client credentials grant type, password grant type, and the refresh token grant type.

1. Client Credentials Grant Type

oauth2:ClientOAuth2Provider provider = new({
    tokenUrl: "https://localhost:9196/oauth2/token",
    clientId: "3MVG9YDQS5WtC11paU2WcQjBB3L",
    clientSecret: "9205371918321623741",
    scopes: ["token-scope1", "token-scope2"]
});

2. Password Grant Type

oauth2:ClientOAuth2Provider provider = new({
    tokenUrl: "https://localhost:9196/oauth2/token/authorize/header",
    username: "johndoe",
    password: "A3ddj3w",
    clientId: "3MVG9YDQS5WtC11paU2WcQjBB3L",
    clientSecret: "9205371918321623741",
    scopes: ["token-scope1", "token-scope2"]
});

3. Refresh Token Grant Type

oauth2:ClientOAuth2Provider provider = new({
    refreshUrl: "https://localhost:9196/oauth2/token/refresh",
    refreshToken: "XlfBs91yquexJqDaKEMzVg==",
    clientId: "3MVG9YDQS5WtC11paU2WcQjBB3L",
    clientSecret: "9205371918321623741",
    scopes: ["token-scope1", "token-scope2"]
});

init (GrantConfig grantConfig)

function generateToken() returns string|Error

string:oauth2:Error token = provider.generateToken();

Represents the inbound OAuth2 provider, which calls the introspection server, validates the received credentials, and performs authentication and authorization.

oauth2:IntrospectionConfig config = {
    url: "https://localhost:9196/oauth2/token/introspect"
};
oauth2:ListenerOAuth2Provider provider = new(config);

init (IntrospectionConfig introspectionConfig)

function authorize(string credential, map<string>? optionalParams) returns IntrospectionResponse|Error

boolean|oauth2:Error result = provider.authenticate("<credential>");