Simple definition
An authorization protocol allowing an application to obtain limited access to a resource without knowing the user’s password.
Technical definition
OAuth 2.0 uses access chips and different streams to delegate permissions between customers, users and resource servers.
What is it used for ?
Allow an application to access a API with specific permissions.
Practical example
An application can receive a token to read a calendar without knowing the password Microsoft 365 The user.
Common issues
- Too wide
- Exhibited token
- Poor authorisation flow
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.