Back

Definition
OAuth is an open authorization framework that allows applications to access a user’s data or resources on another platform without exposing their login credentials. Instead of sharing a password, the user grants limited, scoped access through a token issued by a trusted identity provider.

Why it matters
OAuth protects user credentials by ensuring third-party applications never handle passwords directly. It also gives users visibility and control over what data they share, with the ability to revoke access at any time, making it a foundational standard for secure, modern application integrations.

Example use case
A project management app asks a user to connect their Google Calendar. Rather than entering their Google password into the app, the user is redirected to Google’s login page, approves the specific permissions requested, and the app receives a token that lets it read calendar events without ever seeing the user’s credentials.