educative.io

Client Credentials grant type

Courses
, ,
#1

In Client Credentials grant type, each microservices needs to register themselves with the Authorization Server?
Please clarify this question because in our microservices project I am sending this type of request to Okta server but I never understood how it brings that token on which basis.

Please clarify this question

#2

Hi, @Siddhaling_Dapure
Authentication and authentication logic requires management on each microservice, and this part of the global logic needs to be used repeatedly for each sub-service.
Secondly, tokens and sessions have a little difference. The session is mainly stored on the server, but tokens are assigned to each user and stored in browsers as a cookie. The token contains the user ID information, and each time a request is sent to a server, the server can determine the identity of the visitor and determine whether it has access to the requested device.