class

Authly::AuthorizationHandler

Inherits Reference < Object

The authorization endpoint.

GET shows the consent page to the signed-in resource owner; POST carries the owner's decision. The owner is whoever Authly.config.authenticate_user says is signed in: no request parameter ever names the subject or grants consent. The consent form carries a signed token that binds the request parameters to that subject (see FormToken), which is also the anti-CSRF token.

Constants

CONSENT = "consent"

Class methods

handle(context)

Source