Tuesday, August 5, 2014

OAuth 1.0 vs 2.0

OAuth is an open standard for authorization.
OAuth provides client applications a 'secure delegated access' to server resources on behalf of a resource owner It specifies a process for resource owners to authorize third-party access to their server resources without sharing their credentials. Designed specifically to work with Hypertext Transfer Protocol (HTTP), OAuth essentially allows access tokens to be issued to third-party clients by an authorization server, with the approval of the resource owner, or end-user. The client then uses the access token to access the protected resources hosted by the resource server.






OAuth 1.0
OAuth 2.0

No comments:

Post a Comment