What is OAuth 2.0 and what does it do for you? - Auth0
OAuth 2.0, which stands for “Open Authorization”, is a standard designed to allow a website or application to access resources hosted by other web apps on behalf of a user. It replaced OAuth 1.0 in 2012 and is now the de facto industry standard for online authorization. OAuth 2.0 provides consented access and restricts actions of what the client app can perform on resources on behalf of the user, without ever sharing the user's credentials. Although the web is the main platform for OAuth 2, the specification also describes how to handle this kind of delegated access to other client types (browser-based applications, server-side web applications, native/mobile apps, connected devices, etc.) OAuth 2.0 is an authorization protocol and NOT an authentication protocol. As such, it is designed primarily as a means of granting access to a set of resources, for example, remote APIs or user data. OAuth 2.0 uses Access Tokens. An Access Token is a piece of data that represents the authorization t
What is OAuth 2.0? Definition & Examples | Auth0 Intro to IAM What is OAuth 2.0? What is OAuth 2.0? OAuth 2.0 , which stands for “Open Authorization”, is a standard designed to allow a website or application to access resources hosted by other web apps on behalf of a user. It replaced OAuth 1.0 in 2012 and is now the de facto industry standard for online authorization. OAuth 2.0 provides consented access and restricts actions of what the client app can perform on resources on behalf of the user, without ever sharing the user's credentials. Although the web is the main platform for OAuth 2, the
related reading
- RFC 6749: The OAuth 2.0 Authorization Frameworkdatatracker.ietf.org
- RFC 9700: Best Current Practice for OAuth 2.0 Securitydatatracker.ietf.org
- Signing in with Google - OAuth 2.0 Simplifiedoauth.com
- Secure AI Agent & User Authentication | Auth0auth0.com
- Threat actors misuse OAuth applications to automate financially driven attacksmicrosoft.com
- OpenAI Platformplatform.openai.com
- ERC-20academy.binance.com
- Authorization Academy - What is Authorization?osohq.com
- REST API: Everything You Need to Know | Directusdirectus.io
- Understanding The Web Security Model, Part IV: Cross-Origin Resource Sharing (CORS)educatedguesswork.org
- Keyhive: Local-first access controlinkandswitch.com
- Pilcrow's auth bookauth.pilcrowonpaper.com