.ietf.org/html/draft-ietf-oauth-v2-23#section-4.1">Authorization Code Grant.
The default for {@link #getResponseTypes()} is {@code "code"}. Use {@link AuthorizationCodeResponseUrl} to parse the redirect response after the end usergrants/denies the request. Using the authorization code in this response, use {@link AuthorizationCodeTokenRequest} to request the access token.
Sample usage for a web application:
public void doGet(HttpServletRequest request, HttpServletResponse response) throws IOException { String url = new AuthorizationCodeRequestUrl("https://server.example.com/authorize", "s6BhdRkqt3") .setState("xyz").setRedirectUri("https://client.example.com/rd").build(); response.sendRedirect(url); }
Implementation is not thread-safe.
@since 1.7
@author Yaniv Inbar