OAuth 2.0
OAuth 2.0 is an authorization framework that allows an application to access a resource on behalf of a user or system without receiving the original password.
- Acronym
- OAuth
- Synonym
- OAuth
Definition
OAuth 2.0 is an authorization framework used to delegate access to protected resources. Instead of sharing a password with a client application, the subject authorizes the application and the application receives a limited token that can be used against the target resource according to defined rules, scope, and lifetime.
The Ariovis perspective
API security should keep authentication, token issuance, authorization and secret management distinct. Each control has a different role and must be designed around the actual caller and resource.
Related services
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.