Oauth Introduction

Oauth Introduction

    OAuth (Open Authorization) is an open standard that allows users to allow third-party applications to access the user ’s private resources (such as photos, videos, contact lists) stored on a website without providing the user name and password to the third party application.

    Allow users to provide a token instead of a user name and password to access the data they have deposited with a particular service provider. Each token authorizes a specific website (for example, a video editing website) to access a specific resource (for example, only a video in an album) within a specific time period (for example, within the next 2 hours). In this way, OAuth allows users to authorize third-party websites to access information they store on other service providers without having to share their access permissions or all of their data.

Introduction: https://tools.ietf.org/html/rfc6749#section-4.1.1

Four authorization methods:

1: Authorization code grant mode (Authorization code Grant)

 

 

2. Password mode (Resource Owner Password Credentials Grant)

 

 

3: Client mode:

 

 

4: Implicit Grant (simplified) mode (Implicit Grant)

 

 

Guess you like

Origin www.cnblogs.com/dw3306/p/12748933.html