OAuth 2.0 — OAuth
OAuth 2.0 is the industry-standard protocol for authorization. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, mobile phones, and living room devices.
End User Authentication with OAuth 2.0 — OAuth
This article is intended to help potential identity providers with the question of how to build an authentication and identity API using OAuth 2.0 as the base. Essentially, if you're saying "I have OAuth 2.0, and I need authentication and identity", then read on. What is authentication?
Getting Started - OAuth
OAuth 2.0 Simplified, written by Aaron Parecki, is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level. Roles : Applications, APIs and Users
Client Authentication - OAuth 2.0
The core OAuth 2.0 specification defines the "client password" (e.g. client secret) client authentication type, which defines the client_secret parameter as well as the method of including the client secret in the HTTP Authorization header.
Specs — OAuth
2025年3月1日 · OAuth 2.0 Token Exchange RFC 8693: OAuth 2.0 Device Authorization Grant RFC 8628: OAuth 2.0 Authorization Server Metadata RFC 8414: OAuth 2.0 for Native Apps RFC 8252 Best Current Practice : Authentication Method Reference Values RFC 8176: Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs) RFC 7800: OAuth 2.0 Token …
OAuth Community Site
Featured Video Course: The Nuts & Bolts of OAuth 2.0 An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications. Learn more about OAuth 2.0 »
Introduction — OAuth
2007年9月5日 · OAuth has built in support for desktop applications, mobile devices, set-top boxes, and of course websites. Many of the protocols today use a shared secret hardcoded into your software to communicate, something which pose an issue when the service trying to access your private data is open source.
OAuth 2.0 Authorization Code Grant Type
OAuth 2.0 Authorization Code Grant. tools.ietf.org/html/rfc6749#section-1.3.1. The Authorization Code grant type is used by confidential and public clients to exchange an authorization code for an access token.
It's often a challenge to understand the entire OAuth landscape and how all the different RFCs fit together. OAuth is made up of many small building blocks, from the first RFC published in …
OAuth 2.0 MTLS - Mutual TLS Client Authentication
MTLS is a form of client authentication and an extension of OAuth 2.0 that provides a mechanism of binding access tokens to a client certificate. It is one of many attempts at improving the security of Bearer Tokens by requiring the application using the token to authenticate itself.