Catalog108 / challenges / api/auth/oauth2

OAuth 2.0 Authorization Code flow

What this challenge teaches

Teaches: Full OAuth 2.0 Authorization Code flow: authorize → consent → code → exchange for access_token.

Expected output: Drive the flow programmatically; end with an access_token usable on /api/auth/me.

Submit your scraper's JSON output to /challenges/api/auth/oauth2/grade (grader endpoint is part of a later phase; URL is reserved now).

Click below to start the Authorization Code flow. (You'll need to be signed in via the demo account first.)

Authorize via Catalog108 →

OAuth client config used by this lab

client_id     = catalog108-demo-client
client_secret = demo-secret
redirect_uri  = /challenges/api/auth/oauth2
scopes        = read:products read:profile write:reviews