Study. uk . com
  1. Home
  2. All questions
  3. Question 347

CISSP study material · question 347 of 500

A photo printing site lets a user grant it access to photos held in a separate storage service. Mapping this to the four OAuth 2.0 roles, which pairing is correct?

  1. The printing site is the authorization server and the storage service is the client.
  2. The user is the resource owner and the printing site is the client.
  3. The user is the client and the printing site is the resource owner.
  4. The storage service is the client and the printing site is the resource server.
Show the answer

Answer: B. The user is the resource owner and the printing site is the client.

The resource owner grants access, the client makes requests on the owner's behalf, the resource server holds the resources, and the authorization server issues tokens.

Source: RFC 6749 (IETF) — RFC 6749 > 1.1 Roles

Challenge yourself on this topic → Study as cards