OAuth

最新推荐文章于 2025-04-16 20:28:35 发布

lppl010_

最新推荐文章于 2025-04-16 20:28:35 发布

阅读量165

点赞数

分类专栏： Oauth

Oauth 专栏收录该内容

1 篇文章

订阅专栏

OAuth（Open Authorization）是互联网上基于令牌的认证和授权开放标准。它允许第三方服务使用用户账户信息而不暴露密码，作为中介为服务提供访问令牌。2007年首次发布，2010年推出OAuth 2.0，有新流程、简化签名等更新特性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

OAuth

https://searchmicroservices.techtarget.com/definition/OAuth

OAuth (Open Authorization) is an open standard for token-based authentication and authorizationon the Internet.

OAuth, which is pronounced "oh-auth," allows an end user's account information to be used by third-party services, such as Facebook, without exposing the user's password. OAuth acts as an intermediary on behalf of the end user, providing the service with an access token that authorizes specific account information to be shared. The process for obtaining the token is called a flow.

OAuth, which was first released in 2007, was conceived as an authentication method for the Twitter application program interface (API). In 2010, The IETF OAuth Working Group published OAuth 2.0. Like the original OAuth, OAuth 2.0 provides users with the ability to grant third-party access to web resources without sharing a password. Updated features available in OAuth 2.0 include new flows, simplified signatures and short-lived tokens with long-lived authorizations.

David Rice explains how OAuth works.

View Part 2, Part 3 and Part 4 of David Rice's explanation.

See also: Open ID, single sign-on