OAuth 2.0 is an authorization framework that enables third-party applications to obtain limited access to an HTTP service.
Authorization Flow
- User is redirected to the authorization server.
- User grants permission to the application.
- Authorization server redirects back with an authorization code.
- The application exchanges the code for an access token.
- The token is used to access protected resources.
OAuth decouples user authentication from the service being accessed, improving security and scalability.