We need to implement the Client Credentials Grant flow for OAuth 2 (section 4.4). This is different from the specification, but seems to make more sense than the OpenADR 3.0 specification. We specifically need the expiration timestamp to be set right, such that a client knows when to do a renewed authentication.
As for the token itself: I think our VTN should return a JWT as the access token, that makes the authentication as scalable as possible.
rnijveld
commented
1 month ago
We need to implement the Client Credentials Grant flow for OAuth 2 (section 4.4). This is different from the specification, but seems to make more sense than the OpenADR 3.0 specification. We specifically need the expiration timestamp to be set right, such that a client knows when to do a renewed authentication.
As for the token itself: I think our VTN should return a JWT as the access token, that makes the authentication as scalable as possible.