What is OAuth authorization?
first, what is the OAuth protocol OAuth (open authorization) is an open standard. Allow third-party websites to access various information stored by the user at the service provider, subject to user authorization. This authorization does not require the user to provide a user name and password to the third party website. OAuth allows a user to provide a token to a third-party web site, a token corresponding to a specific third-party site, and the token can only access specific resources for a specific period of time.
second, the principle of oauth and authorization process The three parties involved in the process of authentication and authorization of OAuth include: Service provider: The provider of the user's use of the services, generally used for storing messages, storing photos, videos, contacts, documents, etc. (such as Twitter, Sina, etc.). User: The user of the service provider third party: usually a website that wants to access information stored by the user in the service provider. For example, a Web site that provides photo printing services where users want to print their own web albums that exist in the service provider. Prior to the certification process, third parties are required to request a unique identification of third party services from the service provider. The process of OAuth authentication and authorization is as follows: 1, the user visits the third party website website, wants to the user to store in the service provider's certain resources to carry on the operation. 2. The third party website requests a temporary token from the service provider. 3. After the service provider verifies the identity of the third-party website, it grants a temporary token. 4. After a temporary token is obtained from a third party website, the user is directed to the authorization page of the service provider requesting authorization from the user, and then this process sends the temporary token and the return address of the third party website to the service provider. 5. The user enters their username and password on the authorization page of the service provider, authorizes the third party website to access the corresponding resources. 6. After the authorization succeeds, the service provider directs the user to the return address of the third party website. 7. Third-party websites obtain access tokens from service providers based on temporary tokens. 8. The service provider grants the third-party website access token based on the token and the user's authorization.
9, third-party websites use access tokens obtained to access the corresponding user resources stored in the service provider
What is OAuth authorization?
