OAuth Authorization Code
OAuth Authorization Code

OAuth Authorization Code

The primary method for creating a customer-specific Bearer token is the Authorization Code grant type. This is the standard 3-legged OAuth used in many web applications. It is considered one of the most secure methods of getting a token. All Zebra Bearer tokens last for one hour but can be refreshed using the previous token.
Authorization code grant type is a multi-step process. First you redirect to the IDP login and provide a redirect URI. After the customer logs in, the IDP will send the authorization code to the client app URI. Authorization codes last for 10 seconds. The client app calls the token API with the code to get a bearer token.
Authorization Code Workflow
Go to developer.zebra.com/apis/oauth-authorization-code-0 for more information on OAuth Authorization Code.