OAuth: Your Guide to Industry Authorization and Authentication
In a world of data, users and the applications they trust contain valuable resources. Examples include anything from personally identifiable information (PII) to proprietary secrets, but what’s critical to most everyone is that data stored in the application is only accessible to the user–unless other users or applications are authorized. The user in the OAuth protocol is known as the resource owner. In the OAuth flow, a client represents a third-party application that seeks access to the resource owner’s information. In a universe of applications, all digital users have interacted wi...
Source: esecurityplanet.com