Overview
Direct Answer
OAuth is an open standard protocol that enables secure delegation of user authentication and authorisation without sharing passwords. It allows users to grant third-party applications access to their resources on other platforms through the use of access tokens rather than credentials.
How It Works
The protocol operates through a token exchange mechanism where a user redirects to an authorisation server, authenticates, and approves access scopes for a requesting application. The server issues time-limited access tokens that the third-party application uses to interact with protected resources on behalf of the user, without ever handling the user's password.
Why It Matters
OAuth reduces security risk by eliminating password sharing, strengthens compliance with data protection regulations through granular permission controls, and accelerates user onboarding by enabling single sign-on across multiple services. Organisations benefit from reduced support costs and improved user experience when managing federated identity systems.
Common Applications
OAuth is widely deployed in social login implementations, enterprise identity management systems, mobile application authentication, and API authorisation frameworks. Real-world instances include user account integration with third-party applications, cross-platform service authorisation, and cloud resource access management.
Key Considerations
Organisations must carefully scope permissions to minimise exposure if tokens are compromised, and manage token lifecycle through refresh mechanisms to balance security with usability. Implementation complexity varies significantly across different OAuth flows, requiring selection appropriate to the application architecture and threat model.
Cross-References(1)
More in Cloud Computing
Managed Service
Service ModelsA cloud service where the provider handles infrastructure management, maintenance, updates, and monitoring.
Message Queue
Architecture PatternsA communication method where messages are stored in a queue until the receiving application can process them.
Internal Developer Portal
Deployment & OperationsA centralised web interface that provides developers with self-service access to infrastructure, services, documentation, and templates within their organisation.
Function as a Service
Service ModelsA serverless cloud computing model where individual functions are executed in response to events.
Software as a Service
Service ModelsCloud computing model that delivers software applications over the internet on a subscription basis.
gRPC
Architecture PatternsA high-performance remote procedure call framework developed by Google using Protocol Buffers for serialisation.
Cloud Cost Optimisation
Service ModelsStrategies and practices for minimising cloud computing expenses while maintaining performance and functionality.
Kubernetes
InfrastructureAn open-source container orchestration platform for automating deployment, scaling, and management of containerised applications.