
OAuth
Sign in to saveOAuth (short for open authorization) is an open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Meta Platforms, Microsoft, and Twitter to permit users to share information about their accounts with third-party applications or websites.
Key facts
- Technology standard.image
- Oauth logo.svg
- Technology standard.image_size
- 100px
- Technology standard.caption
- Unofficial logo designed by Chris Messina
- Technology standard.version
- 2.0
- Technology standard.organization
- Internet Engineering Task Force
- Technology standard.website
- IETF OAuth Datatracker
via Wikipedia infobox
Wikidata facts
- Official website
- oauth.net
- Image
- OAuth authorization interface.png
Show 2 more facts
- Stack Exchange tag
- stackoverflow.com/tags/oauth
- Commons category
- OAuth
Sources (2)
via Wikidata · CC0
~14 min read
Article
13 sectionsContents
- History
- Security issues
- OAuth 1.0
- OAuth 2.0
- Types
- Uses
- OAuth and other standards
- OpenID vis-à-vis pseudo-authentication using OAuth
- OAuth and XACML
- Controversy
- See also
- References
- External links
OAuth (short for open authorization) is an open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Meta Platforms, Microsoft, and Twitter to permit users to share information about their accounts with third-party applications or websites.
Generally, the OAuth protocol provides a way for resource owners to provide a client application with secure delegated access to server resources. It specifies a process for resource owners to authorize third-party access to their server resources without providing credentials. Designed specifically to work with Hypertext Transfer Protocol (HTTP), OAuth essentially allows access tokens to be issued to third-party clients by an authorization server, with the approval of the resource owner. The third party then uses the access token to access the protected resources hosted by the resource server.