Nabils I’ll try to answer some of the questions based on the current documentation. However, note that there currently seems to be a bug in the settings editor for OAuth which makes it impossible to use the Client Credentials grant type - see this post (which is about email via REST protocol, but I think that it applies to the OAuth settings editor generally). @aware_support3 confirmed that they are working on it, but haven’t seen an update since then.
What OAuth 2.0 grant type does the built-in implementation use?
It should be possible to use both the Client Credentials and Authorization Code (if it weren’t for the bug mentioned above).
What token endpoint URL does AwareIM generate when the checkbox is enabled?
See the documentation: you can use both a default URL or a custom URL
What is the token request format?
I don’t know exactly.
What does the token response look like?
According to the documentation, the response can be either in the XML format or in JSON format.
Is the token lifetime configurable i.e. 3600 seconds?
Yes, this is one of settings.
Where are the OAuth client credentials (client ID and secret) configured in AwareIM?
You can either define this through the Configurator (which implies that it is stored as part of the BSV file) or store it in the System Settings (in which case it will be stored in the database).
