Casdoor is a UI-first Identity Access Management (IAM) / Single-Sign-On (SSO) platform based on OAuth 2.0, OIDC, SAML, and CAS. Casdoor serves both the web UI and the login requests from application authorization process built upon the OAuth 2.0 protocol. It is highly recommended to have a brief understanding of how OAuth 2.0 works. You can refer to this introduction to OAuth 2.0. St Step 1 (Aut ep 1 (Authorization a website or any other application) should compose a URL in the following format: endpoint/login/oauth/ authorize?client_id=xxx&response_type=code&redirect_uri=xxx&scope=read&state=xxx . Replace endpoint

multiple processes Integration with other services tornado.auth — Third-party login with OpenID and OAuth tornado.wsgi — Interoperability with other Python frameworks and servers tornado.platform.caresresolver redirect_uri='http://your.site.com/auth/google', client_id=self.settings['google_oauth']['key'], scope=['profile', 'email'], response_type='code', SIGCHLD handler. Integration with other services tornado.auth — Third-party login with OpenID and OAuth Common protocols Google Facebook Twitter tornado.wsgi — Interoperability with other Python frameworks

multiple processes Integration with other services tornado.auth — Third-party login with OpenID and OAuth tornado.wsgi — Interoperability with other Python frameworks and servers tornado.platform.caresresolver redirect_uri='http://your.site.com/auth/google', client_id=self.settings['google_oauth']['key'], scope=['profile', 'email'], response_type='code', SIGCHLD handler. Integration with other services tornado.auth — Third-party login with OpenID and OAuth Common protocols Google Facebook Twitter tornado.wsgi — Interoperability with other Python frameworks

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client