1 year ago

Simply put, with OAuth, users can grant websites and applications access to their information on other websites without providing https://www.upguard.com/blog/third-party-credentials-vendor-risk like passwords.

OAuth works as a middleman on behalf of the end-user and grants the third-party application access tokens for authorization.

In order to access the protected resources that are owned by the resource owner (the user), the client (application) sends an authorization request to the authorization server (API) to request authorization by conducting the user to the authorized endpoint.

The client requests an access token (in URL form) from the authorization server by exchanging the token for an authorization grant.

With the resource owner’s approval, OAuth allows the issuing of access tokens to third-party clients via authorization servers.