Enterprise Application Architecture with .NET Core

Understanding OAuth

In a typical scenario of a web application, a user navigates to the website, specifies the username and password, which is then verified by the website by comparing the username and password stored in a database. Once the user is authenticated, a cookie is stored in the browser, which can be used for subsequent requests to access protected resources.

In the modern application scenario, applications consist of several services (Web APIs) and the number of consumers also varies. Moreover, many applications don't have their own authentication provider and they use an external authentication provider such as Google, Facebook, and Microsoft to authenticate users. In this case the typical identity scenario would not work.