OAuth 2.0 — OAuth
OAuth 2.0 is the industry-standard protocol for authorization. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop applications, …
Introduction — OAuth
Sep 5, 2007 · ‘Why OAuth is not an OpenID extension?’ is probably the most frequently asked question in the group. The answer is simple, OAuth attempts to provide a standard way for developers to offer …
OAuth Community Site
An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications. Learn more about OAuth 2.0 »
Getting Started — OAuth
OAuth 2.0 Simplified, written by Aaron Parecki, is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level.
User Authentication with OAuth 2.0
Even with all of this robust authentication capability, OpenID Connect is (by design) still compatible with plain OAuth 2.0, making it a very good choice to deploy on top of an OAuth system with minimal …
Articles — OAuth
Jun 19, 2019 · While OAuth is not an authentication protocol on its own, there are a number of high-profile authentication protocols built with OAuth 2.0. This article seeks to expose common pitfalls and …
Code — OAuth
Code OAuth libraries are available in a variety of languages. ActionScript Bun C ColdFusion Deno Dart .NET Elixir Elm Erlang Go Java JavaScript Kotlin Lua Node.js Objective C Perl PHP PowerShell …
OAuth 2.1
Since the original publication of OAuth 2.0 (RFC 6749) in 2012, several new RFCs have been published that either add or remove functionality from the core spec, including OAuth 2.0 for Native Apps (RFC …
Specs — OAuth
Dec 1, 2025 · OAuth Working Group Specifications Current active drafts in the OAuth working group Active Drafts ... Active Individual Drafts ... RFCs
OAuth 3.0
OAuth 3.0 does not exist. Over the years, even as early as 2012 when OAuth 2.0 was published, several efforts have attempted to evolve and build upon OAuth 2.0.