Oauth 2.0 Application

You can use Horizon as an OAuth 2.0 authentication identity provider by following steps:

Creating oauth applications: currently only group level oauth applications are supported, and only group owners are supported to create.
Your server should support oauth 2.0：In case the token is not passed, does not exist or expires, the third-party server needs to exchange the token with the user's authorization.

Create group owned applications

Go to your group, click "New application" button in Settings->Developer.
Enter a name, homepage URL, description and authorization callback URL. The callback URL is the URL where users are sent after they authorize with Horizon.
Select "Create". You can get OAuth 2 Client ID in the "clientID" field.
Click on the application name, you can edit the application, as well as get the server-side secret key for token exchange. Remember to save the secret key, you can't see it next time.

When the user does not pass a token, or when the passed token is invalid，the server needs to return a 302 code that redirects the client to the following:

GET https://horizon/login/oauth/authorize?client_id=client_id&redirect_uri=redirect_uri&scope=scope&state=state

The parameters are as follows:

Name	Type	Description
client_id	String	Required. The client id you received from Horizon after you create the oauth app.
redirect_uri	String	Required. The URL in the application that the user is sent to after being authorized. Must match the callback URL of oauth app..
scope	String	Optional. A list of scopes separated by spaces. Supported scopes can be found at xxx
state	String	Required. Non-guessable random string, which is used to prevent CSRF attack.

If the user authorizes your request, Horizon will redirect back to your site with a code in the query parameter, which will expire in 10 minutes. You can use code to exchange for a token by the following API：

POST https://horizon.com/login/oauth/access_token?client_id=&client_secret=&code=&redirect_uri=

The parameters are as follows:

Nane	Type	Description
client_id	String	Required. The client id you received from Horizon when you registered the oauth app.
client_secret	String	Required. The client secret you received from Horizon after you create the oauth app.
code	String	Required. The code you received from Horizon after the user authorizes your request.
redirect_uri	String	Required. The URL that the user is sent to after being authorized.

The response body is as follows:

{

  "access_token":"$accessToken",
  "scope":"",
  "token_type":"bearer"
  "expire_in": "3600"
}

You can refer to Using the API