Skip to content

Commit

Permalink
update docs now that scopes are available
Browse files Browse the repository at this point in the history
  • Loading branch information
RichardJECooke authored and RichardJECooke committed Dec 17, 2024
1 parent 54f1c7b commit ff5cd1e
Showing 1 changed file with 1 addition and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -213,9 +213,7 @@ The workflow for this mode looks like:

The **First-party service authorization** mode is the inverse of the **Third-party service authorization** mode. When another application wishes to call your APIs on behalf of one of your users, you are in this mode. Here, your application is the "third-party service" discussed above. Your application asks the user if they want to grant the other application specific permissions. Basically, if you are building a platform and want developers to be able to call your APIs on behalf of their users, you'll need to support this OAuth mode.

With this mode, your OAuth server might display a "permission grant screen" to the user asking if they want to grant the third-party application permissions to your APIs. This isn't strictly necessary and depends on your requirements, but if it is, you want custom scopes.

Custom scopes are not currently supported in FusionAuth; here's the [GitHub tracking issue](https://github.com/FusionAuth/fusionauth-issues/issues/275).
With this mode, you can create custom scopes for each application. To learn how to use scopes, read the documentation [here](/docs/lifecycle/authenticate-users/oauth/scopes).

## Machine-to-machine Authorization

Expand Down

0 comments on commit ff5cd1e

Please sign in to comment.