SoapUI supports all of the OAuth 2.0 grant types. Below you can find additional information on their properties. For more information on configuring OAuth2 authorization, see OAuth2 Tutorial.
Implicit Grant
The Implicit Grant flow is used when the user-agent will access the protected resource directly, such as in a rich web application or a mobile app.
| Option |
Description |
| OAuth 2 Flow |
The OAuth 2 method. |
| Client Identification |
The string identifying the client. |
| Authorization URI |
The authorization server URI. |
| Redirect URI |
The URI you will be redirected to after successful authorization. |
| Scope |
The full scope string defining the requested permissions. |
| Get Access Token |
Click this button to retrieve the access token. |
| Automation |
Click this button to open the Automated Token Profile Editor. |
Authorization Code Grant
The Authorization Code flow is used when the client is a third-party server or web application, which performs the access to the protected resource.
| Option |
Description |
| OAuth 2 Flow |
The OAuth 2 method. |
| Client Identification |
The string identifying the client. This us not user login. |
| Client Secret |
The secret string for the client. This us not user password. |
| Authorization URI |
The authorization server URI. |
| Access Token URI |
The URI to get access token from. |
| Redirect URI |
The URI you will be redirected to after successful authorization. |
| Scope |
The full scope string defining the requested permissions. |
| Get Access Token |
Click this button to retrieve the access token. |
| Automation |
Click this button to open the Automated Token Profile Editor. |
Resource Owner Password Credentials Grant
The password/Resource Owner Password Credentials grant takes the uses the resource owner password to obtain the access token. Optionally, a refresh token is also sent. The password is then discarded.
| Option |
Description |
| OAuth 2 Flow |
The OAuth 2 method. |
| Resource Owner Name |
Resource owner identification. |
| Resource Owner Password |
Password used by the resource owner. |
| Client Identification |
The string identifying the client. This us not user login. |
| Client Secret |
The secret string for the client. This us not user password. |
| Access Token URI |
The URI to get access token from. |
| Scope |
The full scope string defining the requested permissions. |
| Get Access Token |
Click this button to retrieve the access token. |
| Automation |
Click this button to open the Automated Token Profile Editor. |
Client Credentials Grant
The Client Credentials grant type is used when the client is requesting access to protected resources under its control.
| Option |
Description |
| OAuth 2 Flow |
The OAuth 2 method. |
| Client Identification |
The string identifying the client. This us not user login. |
| Client Secret |
The secret string for the client. This us not user password. |
| Access Token URI |
The URI to get access token from. |
| Scope |
The full scope string defining the requested permissions. |
| Get Access Token |
Click this button to retrieve the access token. |
| Automation |
Click this button to open the Automated Token Profile Editor. |