OAuth 2.0 Flow
Noun · Security & Infosec
Definitions
The specific grant type used in an OAuth 2.0 authorization process. Common flows include Authorization Code (web apps), PKCE (SPAs/mobile), Client Credentials (server-to-server), and Device Code (smart TVs). Each flow balances security with the client's capabilities.
In plain English: The specific handshake sequence an app follows to get permission to access your data without knowing your password.
Example: "Use the Authorization Code flow with PKCE for your React app — implicit flow is deprecated because tokens leak in browser history."
Related Terms
- Authentication
- IAM
- JWT Claims
- SSO
- Biometric Authentication
- Challenge-Response
- Device Fingerprinting
- Digital Certificate
- Domain Hijacking
- Identity Federation
- JSON Web Signature
- SAML
- Zero Trust Architecture
- Zero Trust Network Access
- Claims-Based Identity
- Cloud IAM
- Cross-Forest Attack
- Derived Credential
- Domain Controller
- Domain Trust
- Identity Governance
- Just-in-Time Provisioning
- Machine Identity
- Privileged Identity