OAuth

Third-party access protocol

OAuth is a standard protocol that lets users grant websites or applications limited access to their accounts on other services without sharing passwords.

When you click "Sign in with Google" or authorize an app to post to your social media, OAuth handles the handoff: The app uses OAuth to access your calendar.

It issues tokens instead of exposing credentials, so you can revoke access later without changing your password.

protocol

token

Representative placeholder

endpoint · callback · flow · spec · RFC · nonce · claims

roles

client

One who hires professionals

  • userOne who operates something
  • applicationFormal request document
  • APISoftware communication standard

provider · consumer · service · requester · grantor · delegate

providers

Google

Dominant web search provider

  • FacebookDominant social media platform
  • GitHubWeb-based code hosting service
  • TwitterMicroblogging social network

Apple · Microsoft · Amazon · LinkedIn · SSO · integration · federated

Opposites
authentication/authorization method

OAuthpassword entry

Credential submission point

access control philosophy

OAuthclosed system

Exchange-free bounded region

walled garden · root access

Family

authentic, authorize, authorized, unauthorized, authenticity, authenticate, authorization, authorizing, authentication

Familiarity
Top 1,000,000
Profile
Used worldwide · Abstract · Rated G