Android-oauth authentication principle

1. What is oauth?

A Security Authentication Protocol

Provides a secure, open, and simple standard for user resource authorization.

Does not allow third parties to Touch User Account Information

Http://www.oauth.net

2. Role in oauth

Serviceprovider is usually a website (for example:Online storage, Weibo, or blogCustomer)

User user, the user holds the website (Service Provider), And can save and publish some information to other users, such as sendingWeibo Information

ConsumerCustomers such as applications(For programs developed by programmers, our programmers are consumer (customers). They need to access users' private information.

Protected Resources

 

 

Additional information:

The user's private information accessed by the consumer

For example, renrenren wants to call the contact list of QQ mail. The current method is that you need to enter your QQ number on renrenren and the QQ password can be called, although the website may be able to say "do not retain the QQ user name and password", but do you believe it?

Oauth was born to solve this problem. When users access third-party resources, they no longer need to submit your username and password to the website. In this way, you are safe and will not disclose your privacy to untrusted parties. For example, the icon ????

 

3 oauth verification process

 

Add a picture: