What is OAuth
Authorization protocol for resource access
OAuth is an open authorization standard that allows applications to obtain limited access to user resources without sharing passwords.
How It Works
- User grants access to their data
- Service issues an access token
- Application uses the token for requests
- Token can be revoked at any time
OAuth Versions
- OAuth 1.0 — deprecated, complex signatures
- OAuth 2.0 — modern standard, simplified
- OAuth 2.1 — improved security
Use Cases (Grant Types)
- Authorization Code — for web applications
- PKCE — for mobile apps and SPAs
- Client Credentials — for M2M integrations
- Refresh Token — access renewal
Integration Examples
- Sign in with Google/Facebook
- Access Google Drive from an app
- Connect CRM to email service
- Bots with Telegram API access