Documentation

OAuth 2.0 integration guide

Alf Mille combines verified identity (KYC) with Laravel Passport–powered OAuth 2.0. Use this guide to understand flows, endpoints, and safe integration patterns for your applications.

Client Credentials Grant

Use this flow for server-to-server integrations where no end-user signs in.

When to use

Use this for machine-to-machine APIs and backend jobs that act as the application itself.

2. Exchange Authorization Code for Token

POST Request

POST https://www.alfrae.com/oauth/token
Content-Type: application/json

{
  "grant_type": "client_credentials",
  "client_id": "YOUR_CLIENT_ID",
  "client_secret": "YOUR_CLIENT_SECRET",
  "scope": ""
}

Security Notice Keep your client secret only on trusted backend servers. Do not expose it in browser or mobile code.