Implementing Oracle API Platform Cloud Service
by Andrew Bell, Francisco Arturo Viveros, Sander Rensen, Rolando Carrasco, Ricardo Ferreira, Luis Weir, Philip Wilkins
OAuth 2.0 overview
Authentication and Authorization always has and continues to be a critical aspect of systems design in the context of APIs, even more so as Web APIs provide access to HTTP resources, many of which contain sensitive or personal information that should only be accessible by authorized individuals.
OAuth 2.0 is an Authorization Framework that enables third-party applications to obtain limited access to HTTP resources, either on behalf of the resource owner or by allowing the third-party application to obtain access on the owner's behalf. The specification replaces and obsoletes OAuth 1.0 protocol.
It is worth noting that OAuth 2.0, as opposed to SAML, does not deal with authentication. Its main purpose is to provide a mechanism ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access