Oauth Glossary

Browse 8 oauth terms defined in plain English, from the cultural dictionary of computing.

8 Oauth Terms

Access Token: A credential used by a client or service to access protected resources on behalf of a user or itself, often with scoped permissions and limited lifetime. In...
Auth Dance: A joking description of the awkward sequence of redirects, tokens, prompts, and confirmations involved in authentication or authorization flows. In developer...
Authorization Code: A short-lived code used in OAuth authorization flows that a client exchanges for tokens after the resource owner authorizes access. It reduces exposure...
Authorization Server: The component in an authorization framework that authenticates users, obtains consent, and issues tokens to clients. In OAuth-based systems, the authorization...
Code Flow: Usually shorthand for the OAuth authorization code flow, where a client obtains an authorization code and exchanges it for tokens. It is widely used because it...
Consent Phishing: A phishing technique that tricks users into granting malicious applications access through legitimate consent flows, often in cloud identity platforms. Because...
Implicit Grant: Implicit Grant is an older OAuth flow that exposed access tokens directly to the browser and is now discouraged for new systems. Security teams use it to...
OIDC: OpenID Connect — an identity layer built on top of OAuth 2.0 that adds a standardized ID token (a signed JWT containing user claims like email and name) to the...