Скачать или смотреть OAuth2 Explained In 60 Seconds | The #1 Authentication Framework For Production APIs

Oauth2.

A popular authorization framework that handles app authentication. Oauth2 is used in many popular APIs such as Spotify, GitHub, Instagram, and Reddit.

The OAuth2 Standard defines 4 different grant types or flows to get an access token.

1. The first is the Authorization Code grant. Your app gets a temporary authorization code after the user signs in to the service. Then this code is exchanged for an access token.
2. Next is the Authorization Code with PKCE grant. PCKE adds an extra layer of security. A secret is created that only the app knows to prevent anyone else from stealing the authorization code.
3. Your app can also use the Client Credentials grant. This is for app to app communication, so your app will not be able to access any user data because no user sign in is required. Your app will use its own api key and secret to get an access token directly.
4. Finally, you have the Implicit Grant option. This is faster but less secure. The access token is exposed in the url, so think twice about using this method.

This has been.