070-486J Free Dumps Study Materials
Question 13: ASP.NET MVCアプリケーションを開発しています。
OAuthを使用して、アプリケーションに対してユーザーを認証する予定です。
アプリケーションで正しい認証データを使用する必要があります。
あなたは何をするべきか? 答えるには、適切なデータ要素を正しい場所にドラッグします。
各データ要素は、1回、複数回、またはまったく使用できません。
コンテンツを表示するには、ペイン間で分割バーをドラッグするか、スクロールする必要が
ある場合があります。
Correct Answer:Explanation:
Live Connect implements the OAuth 2.0 protocol to authenticate users.
In the authorization code grant flow, the client makes authorization requests by using
request_type=code.
The following diagram illustrates how the authorization code grant flow works.
1. The client starts the flow by directing the resource owner's user agent to the Live Connect
authorization endpoint, by using a URL in the following format.
https://login.live.com/oauth20_authorize.srf?client_id=CLIENT_ID&scope=SCOPES&respons
e_type=code&redirect_uri=REDIRECT_URI
2. The authorization server authenticates the resource owner via the user agent, and
establishes whether the resource owner grants or denies the client's access request.
3. Assuming that the resource owner has granted access, the Live Connect authorization
server redirects the user agent to the client by using the redirection URI that was provided in
the initial request.
4. The user agent calls the client with the redirection URI, which includes an authorization
code and any local state that was provided by the client. For example:
http://contoso.com/Callback.htm?code=AUTHORIZATION_CODE.
5. The client requests an access token from the authorization server's token endpoint by
using its client credentials for authentication, and includes the authorization code that was
received in the previous step.
6. If the credentials are valid, the authorization server responds by returning an access token.
References: https://msdn.microsoft.com/en-us/library/hh243647.aspx