Blog

Wednesday, February 9, 2022Print Subscribe

Lesson: Standalone SPA5 with REST Level 2 and OAuth 2.0

This client app is the look-alike of the SPA4. It works with the REST resources directly. The HTTP methods and URLs are embedded in the code. If you have fallen in love with the hypermedia, then you may find it as a disadvantage. If you are not convinced and prefer the traditional REST, then use this client app as the foundation for your next hybrid or native application. This app in the lesson displays a list of products from the RESTful application created with Code On Time. Its users are authenticated with OAuth 2.0 Authorization Code flow with PKCE. The user picture and email are extracted from JWT courtesy of OpenID Connect.

What is different? This app is not taking advantage of the hypermedia. Instead it makes use of the REST resources with the appropriate HTTP methods. Hence the REST Level 2 designation according to the Richardson Maturity Model.

Standalone SPA5 with REST Level 2 and OAuth 2.0

Labels: OAuth2, REST, RESTful, RESTful Workshop

Monday, February 7, 2022Print Subscribe

Lesson: Standalone SPA4 with RESTful Hypermedia and OAuth 2.0

The purpose of this tutorial is to create a standalone Single Page Application that uses the Authorization Code Flow with PKCE to authenticate the end users. The user picture and email are extracted from JWT courtesy of OpenID Connect. This app can be hosted on any web server of your choice.

Start the Standalone SPA4 with RESTful Hypermedia and OAuth 2.0 segment.

Standalone SPA4 with RESTful Hypermedia and OAuth 2.0

The user interface of anonymous user in the standalone SPA4 with RESTful Hypermedia and OAuth 2.0

Account Access consent form presented to the user during the OAuth 2.0 Authorization Code flow with PKCE in the application created with Code On Time.

Account selector allow users to switch their identity when a client app is requesting account access.

Labels: OAuth2, RESTful, RESTful Workshop, SPA

Tuesday, January 25, 2022Print Subscribe

Lesson: Embedded SPA3 (Custom UI) With RESTful Hypermedia

This lesson from the RESTful Workshop series explains how to remove the UI of the host from the embedded single-page application. This SPA is the “black and white” canvas that developers are free to use in any way they like. The SPA takes the advantage of the host security.

Learn how to create custom landing pages, dashboards, and single page apps embedded in the API host while following the instructions in the Embedded SPA3 (Custom UI) with RESTful Hypermedia segment.

Single Page Application (SPA) with custom user interface embedded in the application with the RESTful API Engine created with Code On Time.

Labels: RESTful, RESTful Workshop, SPA, User Interface

Learn how to log users in and out with REST Level 2 requests and OAuth 2.0 Authorization Code flow with PKCE.