
Episode 526: Brian Campbell on Proof of Possession Defenses
Software Engineering Radio - the podcast for professional software developers
00:00
What Is OAuth 2?
OAuth is an open IETF standard authorization protocol or really it's called a framework because it is pretty open ended. OAuth was primarily trying to solve the problem of enabling that kind of access without requiring users to share their passwords across different sites. So what happens is typically a client which is the OAuth term for the third party application sends the user via a browser to the authorization server and authenticates if they're not already authenticated. The authorization server redirects back to the client includingwhat's called an authorization code but these tokens represent then and are the credentials for making this limited access.
Transcript
Play full episode