OAuth 2.0 Flow | Valstorm Docs

Valstorm implements the standard OAuth 2.0 Authorization Code flow with PKCE for secure user authentication.

Authorization Request

Redirect users to the Valstorm authorization endpoint:

HTTP

GET /oauth2/authorize?client_id=<client_id>&response_type=code&redirect_uri=<redirect_uri>&scope=<scope>

Token Exchange

Once the user authorizes the request, exchange the authorization code for an access token:

BASH

curl -X POST /oauth2/token \
  -d "grant_type=authorization_code" \
  -d "code=<code>" \
  -d "client_id=<client_id>" \
  -d "client_secret=<client_secret>" \
  -d "redirect_uri=<redirect_uri>"