Skip to content
OAuth
EntityQ743238· pop 31· linked from 167 articles

OAuth (short for open authorization) is an open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Meta Platforms, Microsoft, and Twitter to permit users to share information about their accounts with third-party applications or websites.

Key facts

Technology standard.image
Oauth logo.svg
Technology standard.image_size
100px
Technology standard.caption
Unofficial logo designed by Chris Messina
Technology standard.version
2.0
Technology standard.organization
Internet Engineering Task Force
Technology standard.website
IETF OAuth Datatracker

via Wikipedia infobox

Wikidata facts

Official website
oauth.net
Image
OAuth authorization interface.png
Show 2 more facts
Commons category
OAuth
Sources (2)

via Wikidata · CC0

~14 min read

Article

13 sections
Contents
  • History
  • Security issues
  • OAuth 1.0
  • OAuth 2.0
  • Types
  • Uses
  • OAuth and other standards
  • OpenID vis-à-vis pseudo-authentication using OAuth
  • OAuth and XACML
  • Controversy
  • See also
  • References
  • External links

OAuth (short for open authorization) is an open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Meta Platforms, Microsoft, and Twitter to permit users to share information about their accounts with third-party applications or websites.

Generally, the OAuth protocol provides a way for resource owners to provide a client application with secure delegated access to server resources. It specifies a process for resource owners to authorize third-party access to their server resources without providing credentials. Designed specifically to work with Hypertext Transfer Protocol (HTTP), OAuth essentially allows access tokens to be issued to third-party clients by an authorization server, with the approval of the resource owner. The third party then uses the access token to access the protected resources hosted by the resource server.

Gallery (3)

Connections

Categories