1.

How OAuth2 Works?

Answer»

OAuth2.0 is a delegation protocol where the Client (Mobile App or web app) does not need to know about the credentials of RESOURCE Owner (end-user). 

Oauth2 defines four roles. 

  1. Resource Owner - The person or the application that owns the data to be shared. When a resource owner is a person, it is called as an end-user.
  2. Resource Server - The application that HOLDS the protected resources. It is usually a microservice.
  3. Authorization Server - the application that verifies the identity of the resource owner (users/clients). These server ISSUES access TOKENS after obtaining the authorization.
  4. Client - the application that MAKES a request to Resource Server on behalf of Resource Owner. It could be a mobile app or a web app (like stackoverflow).


Discussion

No Comment Found