Ba da izini ga asusu tare da PKCE
Yi amfani da lambar izini tare da S256 PKCE don aikace-aikacen sirri da na jama'a.
- Ƙirƙiri yanayi na bazuwar lissafi da sabon PKCE verifier don kowace izini. Lissafa ƙalubalen S256.
- Mayar da hankali zuwa ga mahadar izini tare da client_id, daidai redirect_uri, response_type=code, scope, state, code_challenge da code_challenge_method=S256.
- Abokin ciniki zai shiga, zaɓi asusun kansa ko na ƙungiya, duba iyakokin da ya dace kuma ya amince da kowace shirin biyan kuɗi.
- Tabbatar da state a lokacin dawowa. Musanya lambar sau ɗaya, tare da redirect URI na asali da code_verifier.
- Ajiye tokens cikin tsaro. Yi amfani da abokin ciniki mai iyaka da aka dawo dashi a matsayin mai gano abokin ciniki.
https://auth.shareai.now/oauth/token- URL na Asali
https://auth.shareai.now- Tantancewa
- ID na abokin ciniki na jama'a + PKCE, ko kuma tabbatar da abokin ciniki mai sirri + PKCE
cURL
curl --fail-with-body 'https://auth.shareai.now/oauth/token' --data-urlencode 'grant_type=authorization_code' --data-urlencode "client_id=$SHAREAI_CLIENT_ID" --data-urlencode "code=$AUTHORIZATION_CODE" --data-urlencode 'redirect_uri=https://your-app.example/callback' --data-urlencode "code_verifier=$PKCE_VERIFIER"
Wannan misali ne don abokin ciniki na jama'a. Kada a ƙara sirri ko takaddun shaida na HTTP Basic. Abokin ciniki mai sirri yana tabbatar da kansa ta amfani da takaddun shaida na sabar-sa tare da PKCE. Kada a taɓa aika sirrin abokin ciniki mai sirri a cikin burauza, tebur, wayar hannu ko rarraba mai zaman kansa.
Gano: https://auth.shareai.now/.well-known/openid-configuration. Yi amfani da mahadar da aka tallata da maɓallan sa hannu. Ƙi rashin daidaiton state, masu bayarwa da ba a zata ba da kuma ID-token audience ko sa hannu mara inganci.
Ka'idoji: Mafi kyawun hanyoyin tsaro na OAuth kuma PKCE. Sabunta tokens.
An sabunta karshe ranar 18 ga Satumba, 2026