Get token | ⚠️ Read doc

GET https://www.arcgis.com/sharing/rest/oauth2/authorize/?client_id={{client_id}}&redirect_uri=https://hhkaos.github.io/arcgis-oauth-callback/&response_type=token&expiration=60&state=qyxmpg9e5uWUPbxw

Avoid implicit grant as much as possible (susceptible to XSS attacks)

Find more: https://oauth.net/2/grant-types/implicit/

Course: Web Security and Access Management: JWT, OAuth2 & OpenId Connect

Request Params

KeyDatatypeRequiredDescription
client_idstring(Required) The ID of the registered application. Use: https://developers.arcgis.com/applications/
redirect_uristring(Required) {{client_id}}'s "Redirect URLs" have to be configured to accept it. For web: https://....
response_typestring(Required) Type of grant, either implicit (token) or authorization (code)
expirationnumberFor token (specified in minutes). Max. 20160 minutes (2 weeks). Default 120 minutes
statestringValue used by applications to maintain state between authorization requests and responses or pass along additional app-specific information. This also allows you to prevent CSRF attacks by confirming that the value coming from the response matches the one you sent.
localestringThe login page will be rendered using the language corresponding to that locale
stylestringColor scheme used to render the login page regardless of browser or operating system settings (light

RESPONSES

status: OK

"\u003c!DOCTYPE html\u003e\n\u003chtml\u003e\n    \u003chead\u003e\n        \u003cmeta charset=\"UTF-8\"\u003e\n        \u003cmeta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"\u003e\n        \u003cmeta http-equiv=\"X-UA-Compatible\" content=\"ie=edge\"\u003e\n        \u003cmeta name=\"referrer\" content=\"origin\"\u003e\n        \u003ctitle\u003eSign In\u003c/title\u003e\n        \u003cscript src=\"/sharing/files/scripts/detector.min.js?v=1A68A60\"\u003e\u003c/script\u003e\n        \u003clink rel=\"stylesheet\" href=\"/sharing/files/css/site.min.css?v=1A68A60\"\u003e\n        \u003cscript src=\"/sharing/files/scripts/theme.min.js?v=1A68A60\"\u003e\u003c/script\u003e\n        \u003cscript\u003e\n        var oAuthInfo = {\"oauth_state\":\"aIX7XusbFdM68ZWzeiEFQ7g..EudEWxgCfiZWevihQgVMZLzgSm5OtgJKzQ3bLF4NC20y3SVgGqxo8L_aWGm9LvqnTxvitXdWfceegUstZ4Z28NHtZe7un_BUfbeXZwaUYhbGlveKp8iUUAkHuPPIHH4Y_bnUICHWbGZzTS9iG0r0iwUl5sbI5HQbX6gMvNFbb-x6IfbGJuUEOzZ8bNp9Kwc9ZTos1eyQNHPVjqAat0no1IPtZSQRORnzwdkJWiFCBsWqcMngHlegq3j0KRs4SeNEpsEzWWcQw8ZpH4NQz0HRMtXO3YfYLJO5TIdYTMglcPKS3PlIdrbbJBNmKKWr1EGg\",\"client_id\":\"13UCJocz87fHJNs6\",\"appTitle\":\"oAuth app - DevSummit Berlin\",\"locale\":\"en-us\",\"persistOption\":true,\"showSocialLogins\":true,\"contextPath\":\"/sharing\",\"appOrgInfo\":{\"id\":\"Q6ZFRRvMTlsTTFuP\",\"name\":\"Raul Jimenez Ortega Account\",\"description\":\"This is the organisation page of my developer account. You can see here some of the projects I have participated. If you want to read more about me please go to \n            \u003ca href=\\\"http://www.rauljimenez.info\\\" target=\\\"_blank\\\"\u003erauljimenez.info\u003c\\/a\u003e\",\"thumbnail\":\"thumbnail.png\"},\"orgUrlBase\":\"maps.arcgis.com\",\"helpBase\":\"https://doc.arcgis.com/en/arcgis-online/\",\"socialProviders\":[\"github\",\"facebook\",\"google\",\"apple\"],\"originSignin\":false}\n        window.setTheme(oAuthInfo, \"/sharing\");\n    \n            \u003c/script\u003e\n            \u003cscript src=\"/sharing/files/scripts/oauth2.js?v=1A68A60\"\u003e\u003c/script\u003e\n        \u003c/head\u003e\n        \u003cbody\u003e\n            \u003cdiv class=\"content-container\"\u003e\u003c/div\u003e\n        \u003c/body\u003e\n        \u003cscript\u003e\n    oAuthInfo.locale = ((oAuthInfo.locale \u0026\u0026 oAuthInfo.locale === \"iw\") ? \"he\" : oAuthInfo.locale);\n    require.config({\n        baseUrl: \"/sharing/files/scripts/\",\n        locale: oAuthInfo.locale \u0026\u0026 oAuthInfo.locale.toLowerCase() || \"\"\n    });\n    require([\"signIn\", \"domReady!\"], function (signIn) {\n        signIn.startup(oAuthInfo);\n    });\n\u003c/script\u003e\n    \u003c/html\u003e"