Case & CodeA FIELD GUIDE TO AI
Start learning
Intermediate

OAuth

Also: OAuth 2.0

In plain words

A standard way to let one app use another on your behalf without giving it your password.

The fuller definition

OAuth is an authorization framework that lets applications obtain limited access to resources through access tokens rather than receiving the user's password for that resource service.

How it fits together
  1. User grant

    Approve a scope

  2. Token

    Limited delegated access

  3. Resource

    Check the token

A simplified relationship, not a screenshot or a complete design.

A concrete example

A user grants an application permission to read selected calendar information through a supported authorization flow.

The distinction that matters

OAuth alone is not an identity protocol; OpenID Connect adds an identity layer in common sign-in systems.

Related terms

Where it is taught

APIs and JSON: connect a model to a small program

Source and further reading

IETF · OAuth 2.0

The definition and example are written for this library. The link gives background, official documentation or legal authority as labelled. Legal scope depends on the jurisdiction and current text; product features depend on release and settings.

Lessons, terms, practical guides and sources ESC