38. Core Response Type
Code Token
Secure Efficient
2 HTTP request 1 HTTP request
Require Approval Both at once
Get Access Token
+ extensions
OpenID TechNight #7
39. Token Type Spec
Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner
Client API
Access
OpenID TechNight #7
40. Token Token Type Spec
Bearer MAC
No signature Signature
No token secret Token secret
Mainstream Similar to OAuth 1.0
+ extensions
OpenID TechNight #7
41. Token Token Type Spec
Bearer MAC
No signature Signature
No token secret Token secret
Mainstream Similar to OAuth 1.0
In most cases, you use this.
+ extensions
OpenID TechNight #7