Category: Data, github

Originally siloed, these applications have become increasingly connected.

This trend of applications talking to each other on your behalf is called “Delegated Access” and has become a necessary part of our online lives.

You are likely familiar with requests like these: Figure Using OAuth, Spotify (client) is able to access Facebook (resource server) without credentials on behalf of Bob (resource owner)

Through the usage of grants and tokens, which we will discuss next, Spotify is given Bob’s valet card to his Facebook account.

This token is meaningless to Spotify, but Facebook is able to decode it and verify that Spotify was really given permission from Bob.

Related Articles