Curity logo
Start Free Trial
      • Product Overview
      • Architecture
      • Authentication Service
      • Token Service
      • User Management Service
      • Token Handler
      • Community Edition
      • DevOps and SecOps
      • Deployment
      • Authentication Service
      • Authentication
      • Passkeys
      • Passwordless Authentication
      • SSO, MFA and Social Logins
      • Advanced Authentication
      • Decentralized Identity
      • Digital Wallet
      • Verifiable Credentials
      • User Journey Orchestration
      • Authentication Actions
      • Browserless Login
      • Adaptive Authentication
      • Branding and UX
      • Secure Access
      • High-Grade API Security
      • SPA Security
      • Extensibility and SDK:s
      • Identity Standards
      • Standards and Conformance
      • API Access Control
      • CIAM
      • Decentralized Identity
      • B2B
      • Digital Wallet
      • Verifiable Credentials
      • Large Scale Deployments
      • Non-human Identities
    • Open Banking & Financial-Grade APIs
    • Common Identity Platform
    • Zero Trust and Security Architecture
    • Secure Frictionless Authentication
    • Modernizing Infrastructure
    • Secure IAM in the Age of AI
    • Healthcare
    • Financial Services
    • Technology / SaaS
    • Government
    • Telecom
    • Resource Library
    • What's New
    • Articles
    • Getting Started
    • How-tos
    • Guides
    • Code Examples
    • Webinars
    • Whitepapers
    • Documents
    • Videos
    • Courses
    • Training
    • OAuth Tools
    • About
    • Customers
    • Partners
    • Blog
    • Careers
    • Events Calendar
    • ESG
    • News
    • Developer Portal
    • Releases
    • Documentation
    • Libraries & SDKs
    • OAuth Tools
  • Plans & Pricing
    • Ticket-based Support
    • Instant Message Support
    • Professional Services
    • Training
  • Contact
  • Search
Curity logo
  • Contact us
  • Search
  • Book a Call
  • Start free trial
ArticlesGetting StartedHow-tosGuidesCode ExamplesDocumentationVideosWebinarsCoursesTrainingDocuments
What's newRSS

APIs and ClientsAPIs and Clients

  • APIs
    • Securing a Spring Boot API with JWTs
    • Securing a Java API with JWTs
    • Securing a Kotlin API with JWTs
    • Securing a .NET API with JWTs
    • Securing a Go API With JWTs
    • Securing a Node.js Express API with JWTs
    • Securing a Python Flask API with JWTs
    • Securing a Symfony API with JWTs
    • Securing a Serverless API with JWTs
    • Securing a Serverless API on Vercel using JWTs
    • Mutual TLS Secured API
    • API Access via JWT Assertions
    • Securing API Events using JWTs
    • Testing Zero Trust APIs
  • Single Page Apps
    • SPA using Token Handler
    • Token Handler Deployment Example
    • Javascript SPA using Assisted Token Flow
    • Javascript SPA using OAuth Assistant Library
    • Javascript SPA using Code Flow + PKCE
    • React SPA using Assisted Token Flow
    • Angular SPA using Assisted Token Flow
    • Hypermedia Authentication API React Demo
  • Websites
    • OpenID Connect Client with Spring Security
    • OpenID Connect Client with .NET
    • OpenID Connect Client with .NET Framework
    • OpenID Connect Client with Node.js Express
    • OpenID Connect Client with Python
    • OpenID Connect Client with Java Undertow
    • OpenID Connect Client with MITREid
    • OpenID Connect Client with Mutual TLS
    • OpenID Connect Client with Encrypted ID Tokens
    • SAML 2.0 Website
  • Mobile Apps
    • Kotlin Android App using AppAuth
    • Kotlin Android App using HAAPI
    • Swift iOS App using AppAuth
    • Swift iOS App using HAAPI
    • React Native App using HAAPI
    • Mobile Dynamic Client Registration
    • Mobile Web SSO
    • Mobile Setup with ngrok
  • AI Agents
    • Implement MCP Authorization
    • Backend Agent with A2A Authorization
    • Secure an OpenAI ChatGPT App

PluginsPlugins

  • Alarm Handlers
    • Alarm Integration Plug-in
  • Authenticators
    • Bitbucket Authenticator
    • Box Authenticator
    • Idura Authenticator
    • Dropbox Authenticator
    • Entrust Authenticator
    • Freja eID Authenticator
    • GitHub Authenticator
    • Instagram Authenticator
    • LinkedIn Authenticator
    • Nonce Authenticator
    • reCAPTCHA Authenticator
    • Salesforce Authenticator
    • Slack Authenticator
    • StackExchange Authenticator
    • Twitter Authenticator
    • Username Password Authenticator
    • Windows Live Authenticator
  • Authentication Actions
    • Choose Account Authentication Action
    • Debug Attribute Authentication Action
    • Redirect Action Example
    • Send Email Action Example
    • Time Based Deny Authentication Action
    • Kong Dev Portal User Provisioner
    • Azure API Management User Provisioner
    • Microblink BlinkID Authentication Action
    • iProov Authentication Action
  • Data Access
    • PBKDF2 Credential Data Access Plugin
    • RESTful Data Access Plugin
  • Claims Providers
    • Salesforce Claims Provider
  • Consentors
    • Example Generic Consentor
  • Emailers
    • RESTful Emailer Plug-in
    • Twilio SendGrid Emailer Plugin
  • Event Listeners
    • Amazon SQS Event Listener
    • Apigee Token Publisher Event Listener
    • Apigee Split Token Publisher Event Listener
    • AWS Split Token Publisher Event Listener
    • Client Authentication Attempt Counter
    • Cloudflare Token Publisher Event Listener
  • SMS Senders
    • RESTful SMS Sender Plugin
    • Tele2 SMS Plugin
  • Authorization Managers
    • XACML Authorization Manager
    • Open Policy Agent Authorization Manager
    • AuthZEN Authorization Manager
  • Token Procedures
    • Long-Lived Tokens on Refresh Procedure Plugin
    • Exchange Opaque Token to JWT
    • OpenID AuthZEN Token Procedure
    • Token Exchange With External IdP

Learn MoreLearn more

  • Webinars
  • Documents
  • Videos
  • Training
Token Procedures

Token Procedures

Example implementations of Token Procedure plugins. Examples of procedures that alter responses from the token endpoint in different OAuth and OpenID Connect flows.

Long-Lived Tokens on Refresh Procedure Plugin

Long-Lived Tokens on Refresh Procedure Plugin

A token procedure plugin example that adds features to the token refresh flow. It can also be used as an example of writing token procedure plugins.

Exchange Opaque Token to JWT

Exchange Opaque Token to JWT

An example of how to implement a Token Exchange (RFC 8693) plugin. In this example an opaque token is exchanged into a JWT.

OpenID AuthZEN Token Procedure

OpenID AuthZEN Token Procedure

A Token Procedure example using an AuthZEN PDP to determine if tokens should be issued

Token Exchange With External IdP

Token Exchange With External IdP

An example of how to implement Token Exchange with external IdP issued JWTs.

Curity logo

info@curity.io

Get in touch

  • X icon
  • LinkedIn icon
  • YouTube icon
  • Bluesky icon
  • GitHub icon
  • Subscribe to Curity's RSS Feeds icon
  • Medium icon
  • Nordic APIs icon
Sign up for API Security Insights.

© Curity AB Terms of Service

Product

  • Product Overview
  • Authentication Service
  • Token Service
  • User Management Service
  • Curity Token Handler
  • Authentication
  • Secure Access
  • CIAM
  • User Journey Orchestration
  • Decentralized Identity
  • B2B
  • Non-human Identities
  • Extensibility and SDK:s
  • Identity Standards
  • Community Edition
  • Product Plans
  • FAQ
  • Support
  • Deployment
  • DevOps and Secops

Solutions

  • Overview
  • Open Banking & Financial-Grade APIs
  • Common Identity Platform
  • Zero Trust and Security Architecture
  • Secure Frictionless Authentication
  • Modernizing Infrastructure
  • Secure IAM in the Age of AI
  • Healthcare
  • Financial Services
  • Technology / SaaS
  • Government
  • Telecom

Resources

  • Resource Library
  • What's New
  • Articles
  • Getting Started
  • How-tos
  • Guides
  • Code Examples
  • Webinars
  • Whitepapers
  • Documents
  • Videos
  • Courses
  • Training
  • OAuth Tools

Company

  • About
  • Customers
  • Partners
  • Blog
  • Careers
  • Events Calendar
  • ESG
  • News

Customers

  • If P&C Insurance
  • Santander
  • PagerDuty
  • Scandic
  • Maersk
  • dm Tech
  • Customer stories
Security ScoreCard
SOC2 Type 2 ComplianceISO/IEC 27001 Compliant
observatory: A+ (100/100)observatoryobservatoryA+ (100/100)A+ (100/100)
SSL: A+ SSL SSL A+ A+