OAuth2 is the standard currently used by almost all major websites that allow you to access their resources through a shared API. It delegates user authentication to an independent service that stores user credentials and authorizes third-party applications to access shared information about users' accounts. OAuth2 is used for giving your users access to data while protecting their account credentials. It provides flows for web, desktop, and mobile applications. The following are some basic terms and roles related to OAuth2:
- Resource owner: This role governs access to the resource. This access is limited by the scope of the granted authorization.
- Authorization grant: This grants permission for access. There are various ...