oauth-provider – Tarik Billa

Implementing OAuth 2.0 Authentication for My API

January 5, 2024 by Tarik

Actually protocol flow diagrams would be extremely helpful for visualizing specs like that of OAuth 2 but there are only some partials works out there. As I’ve just implemented a client-side only OAuth 2 library, I can verify that you’re on the right track. But here is a catch: oauth_token belongs to your client application … Read more

OAuth – What exactly is a resource owner? When is it not an end-user?

July 26, 2023 by Tarik

Resource owner can be a machine, not just people. There are many cases where no humans are involved in the entire OAuth flow, especially in enterprise setups. At least, that’s what I meant when I introduced the term in RFC 5849 (and later in OAuth 2.0).