Skip to content

Commit 9c4a555

Browse files
authored
fix: validated authorization code flow with rar article (#656)
* fix: validated authorization code flow with rar article * Fixed language in code sample * Fixed language
1 parent 3b7f2ee commit 9c4a555

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

main/docs/get-started/authentication-and-authorization-flow/authorization-code-flow/authorization-code-flow-with-rar.mdx

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
---
22
description: Learn how to use Rich Authorization Requests (RAR) with the Authorization Code Flow.
33
title: Authorization Code Flow with Rich Authorization Requests (RAR)
4+
validatedOn: 2026-02-20
45
---
56

67
Using [Rich Authorization Requests (RAR)](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar), clients can request and obtain <Tooltip tip="Fine-grained Authorization (FGA): Auth0 product allowing individual users access to specific objects or resources." cta="View Glossary" href="/docs/glossary?term=fine-grained+authorization">fine-grained authorization</Tooltip> data from <Tooltip tip="Resource Owner: Entity (such as a user or application) capable of granting access to a protected resource." cta="View Glossary" href="/docs/glossary?term=resource+owners">resource owners</Tooltip>, such as end users.  Clients can pass RAR data to the Pushed Authorization Request (PAR) endpoint as part of the Authorization Code Flow. To learn more, read [Configure Pushed Authorization Requests](/docs/get-started/applications/configure-par).
@@ -19,11 +20,11 @@ You must pass the `authorization_details` parameter to the `/par` endpoint, whic
1920

2021
To complete the Authorization Code Flow, exchange the authorization code at the `/oauth/token` endpoint, as in the following example:
2122

22-
```json lines
23-
POST https://$tenant/oauth/token
23+
```http lines
24+
POST https://{YOUR_DOMAIN}.auth0.com/oauth/token
2425
Content-Type: application/x-www-form-urlencoded
2526
26-
grant_type=authorization_code&client_id=[CLIENT_ID]&client_secret=[CLIENT_SECRET]&code=[AUTHZ_CODE]&redirect_uri=https://jwt.io
27+
grant_type=authorization_code&client_id={YOUR_CLIENT_ID}&client_secret={YOUR_CLIENT_SECRET}&code={AUTHORIZATION_CODE}&redirect_uri=https://jwt.io
2728
```
2829

2930

@@ -97,7 +98,7 @@ To configure RAR for the Authorization Code Flow, you need to:
9798

9899
To learn more, read [Configure Rich Authorization Requests](/docs/get-started/apis/configure-rich-authorization-requests).
99100

100-
### Access `authorization_details` in Actions
101+
## Access `authorization_details` in Actions
101102

102103
<Callout icon="file-lines" color="#0EA5E9" iconType="regular">
103104

0 commit comments

Comments
 (0)