Oauth - evan-401-advanced-javascript/seattle-javascript-401d31 GitHub Wiki

Oauth is a standard for access delegation that allow usersk to securely access a website with a user name or password. Oath will allow you to login using services like facebook or google so that the website owner can avoid building and maintaining their own authentication service. You may have used OAuth before using an application like Spotify that allows you to login using facebook rather than logging into the site itself. The process works something like this:

  • A user authorizes facebook to work with spotify
  • Facebook sends an authorization grant to spotify who in turn sends one back
  • facebook sends over an access token specifically for that user.
  • The user sends that access key to spotify.
  • Spotify sends music to the user.