OAuth Access Delegation Standard

An OAuth Access Delegation Standard is an open access delegation standard (for access delegation).

• Context:
  • It can (typically) make use of Hypertext Transfer Protocol (HTTP).
  • It can (often) be used as a way for Internet users to grant websites or applications access to their information on other websites but without giving them the passwords.
  • …
• Example(s):
  • OAuth 2.0.
  • …
• Counter-Example(s):
  • OpenID Connect (OIDC), for OpenID.
  • XACML.
• See: Access Delegation, Initiative for Open Authentication, Auth0.

---

---

References

2023

• (Wikipedia, 2023) ⇒ https://en.wikipedia.org/wiki/OAuth Retrieved:2023-9-7.
  • OAuth (short for "Open Authorization" ) is an open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Facebook, Microsoft, and Twitter to permit users to share information about their accounts with third-party applications or websites.

    Generally, the OAuth protocol provides a way for resource owners to provide a client [application] with secure delegated access to server resources. It specifies a process for resource owners to authorize third-party access to their server resources without providing credentials. Designed specifically to work with Hypertext Transfer Protocol (HTTP), OAuth essentially allows access tokens to be issued to third-party clients by an authorization server, with the approval of the resource owner. The third party then uses the access token to access the protected resources hosted by the resource server.

2020

• (Wikipedia, 2020) ⇒ https://en.wikipedia.org/wiki/OAuth Retrieved:2020-2-14.
  • OAuth is an open standard for access delegation, commonly used as a way for Internet users to grant websites or applications access to their information on other websites but without giving them the passwords. This mechanism is used by companies such as Amazon, Google, Facebook, Microsoft and Twitter to permit the users to share information about their accounts with third party applications or websites. ...

---