Olympus Documentation What is Olympus Architecture Repo Map License Glossary

Athena API Authentication Athena API Errors Athena API Pagination Athena Settings API SDK Settings API

Environment variables

OAuth2 grant types Authorization Code Authorization Code + PKCE Client Credentials Refresh Token Implicit Resource Owner Password Credentials

ReferenceGrants

Client Credentials

Confidential client POSTs `grant_type=client_credentials` with its credentials. Hydra returns an access token (no refresh, no ID token).

Client Credentials

Spec: RFC 6749 §4.4

Supported in Olympus: Yes

When to use

Backend-to-backend (M2M). No user involved.

How it works

Confidential client POSTs grant_type=client_credentials with its credentials. Hydra returns an access token (no refresh, no ID token).

Integration guide

See /docs/integrate/oauth2/oauth2-client-credentials for full setup.

Related

Integrate, OAuth2 overview
Security, PKCE enforcement

Authorization Code + PKCE

Same as Authorization Code, but with a per-flow `code_verifier` ↔ `code_challenge` pair to prevent code interception.

Refresh Token

Client exchanges refresh token for a new access token (and a new refresh token, Hydra rotates).

On this page

Client Credentials When to use How it works Integration guide Related