This is an old revision of the document!
OAuth
Capturing the request
| Column | Type | Obtained from | Description |
|---|---|---|---|
| id | UUID | Generated | ID to keep track of the request |
| secret | str | Generated | Secret stored in a flow cookie |
| session_id | Optional FK | Logged in session | Associated login session |
| client_id | FK | Query string | The OAuth client sending this request |
| response_type | str | Query string | OAuth response type. e.g. Authorization Code, ID token etc. |
| scope | str | Query string | The requested scope. Usually contains openid as a minimum |
| state | str | Query string | Client specific state |
| nonce | str | Query string | Passed through to the ID token |
| redirect_uri | str | Query string | Where to redirect after authenticating |
| acr_values | str | Query string | Requested authentication level |
| code_challenge | str | Query string | PKCE challenge |
| code_challenge_method | str | Query string | PKCE method |