Overview
Direct Answer
OAuth is an open standard protocol that enables secure delegation of user authentication and authorisation without sharing passwords. It allows users to grant third-party applications access to their resources on other platforms through the use of access tokens rather than credentials.
How It Works
The protocol operates through a token exchange mechanism where a user redirects to an authorisation server, authenticates, and approves access scopes for a requesting application. The server issues time-limited access tokens that the third-party application uses to interact with protected resources on behalf of the user, without ever handling the user's password.
Why It Matters
OAuth reduces security risk by eliminating password sharing, strengthens compliance with data protection regulations through granular permission controls, and accelerates user onboarding by enabling single sign-on across multiple services. Organisations benefit from reduced support costs and improved user experience when managing federated identity systems.
Common Applications
OAuth is widely deployed in social login implementations, enterprise identity management systems, mobile application authentication, and API authorisation frameworks. Real-world instances include user account integration with third-party applications, cross-platform service authorisation, and cloud resource access management.
Key Considerations
Organisations must carefully scope permissions to minimise exposure if tokens are compromised, and manage token lifecycle through refresh mechanisms to balance security with usability. Implementation complexity varies significantly across different OAuth flows, requiring selection appropriate to the application architecture and threat model.
Cross-References(1)
More in Cloud Computing
Load Balancer
InfrastructureA device or software that distributes network traffic across multiple servers to ensure no single server is overwhelmed.
Spot Instances
Service ModelsSpare cloud computing capacity offered at steep discounts compared to on-demand pricing, available when the provider has excess resources but subject to interruption.
Public Cloud
Service ModelsCloud computing resources shared among multiple organisations and available to the general public over the internet.
Service Mesh
Architecture PatternsAn infrastructure layer handling service-to-service communication in microservices, managing traffic, security, and observability.
Container
InfrastructureA lightweight, portable software package that bundles application code with all its dependencies for consistent execution.
Spot Instance
Service ModelsA cloud computing option that uses spare capacity at significantly reduced prices with the possibility of interruption.
Sovereign Cloud
Strategy & EconomicsCloud infrastructure operated within national boundaries under local jurisdiction, ensuring data sovereignty, regulatory compliance, and protection from foreign government access.
Pub/Sub
Architecture PatternsA messaging pattern where publishers send messages to topics and subscribers receive messages from topics of interest.