OAuth 2.0 — OAuth
OAuth 2.0 is the industry-standard protocol for authorization. OAuth 2.0 focuses on client developer simplicity while providing specific authorization flows for web applications, desktop …
Getting Started — OAuth
OAuth 2.0 Simplified, written by Aaron Parecki, is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level.
OAuth Community Site
An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications. Learn more about OAuth 2.0 »
OAuth 2.1
Since the original publication of OAuth 2.0 (RFC 6749) in 2012, several new RFCs have been published that either add or remove functionality from the core spec, including OAuth 2.0 for …
Introduction — OAuth
Sep 5, 2007 · ‘Why OAuth is not an OpenID extension?’ is probably the most frequently asked question in the group. The answer is simple, OAuth attempts to provide a standard way for …
User Authentication with OAuth 2.0
OpenID Connect is built directly on OAuth 2.0 and in most cases is deployed right along with (or on top of) an OAuth infrastructure. OpenID Connect also uses the JSON Object Signing And …
Specs — OAuth
Oct 20, 2025 · OAuth Working Group Specifications Current active drafts in the OAuth working group Active Drafts ... Active Individual Drafts ... RFCs
OAuth Grant Types
The OAuth framework specifies several grant types for different use cases, as well as a framework for creating new grant types. The most common OAuth grant types are listed below.
Code — OAuth
Code OAuth libraries are available in a variety of languages. ActionScript Bun C ColdFusion Deno Dart .NET Elixir Elm Erlang Go Java JavaScript Kotlin Lua Node.js Objective C Perl PHP …
OAuth Client ID Metadata Document
The Client ID Metadata Document extension defines a mechanism for an OAuth client to host its metadata at a URL to be able to work with authorization servers without prior registration.