OAuth2 时序图

User

7. show user resources

3. Username+Password+client id+client secret

8. return access token and refresh token

Resource Owner Password Credentials Grant

5. Redirect to redirectURL+authorization code

1. User visit client

4. Redirect to redirectURL+token

Implicit grant

2. return access token

User Agent

How to use token

2. Redirect to the authorization page+client id+redirectURL

Authorization code grant

5. finish

7. Authorization code+client id+client secret

3. UserName+Password+client id+redirectURL

Client Server

4. return access token and refresh token

Login

6. use code get token

8. View and read

1. client id+client secret

Client Credentials grant

3. return access token

2.Username+Password

6. return user resources

Resource Server

10. finish

4. verify access token

OAuth Server

Shiro Login

2. request to visit userresources

5. verify result

9. return tokens

4. Return authorization code

3. visit user resources request+ access token