Configure automatic authorization

Ensure that we enabled the OAuth 2.0 feature and configured an OAuth service provider by following Defining an OAuth service provider.

We can authorize an OAuth client without the approval of the resource owner by enabling the automatic authorization feature of the WebSphere Application Server OAuth service provider.

To configure auto consent, use the autoAuthorizeParam attribute and the <autoAuthorizeClient> subelement of the <oauthProvider> element in server.xml:

<oauthProvider id="OAuthConfigSample" autoAuthorizeParam="autoauthz" ...>
  ...
  <autoAuthorizeClient>client01</autoAuthorizeClient>
  <autoAuthorizeClient>client02</autoAuthorizeClient>
</oauthProvider>

Results

The client01 and client02 OAuth clients are configured for automatic authorization.

Parent topic: OAuth 2.0 services