Solving Identity Management in Modern Applications: Demystifying OAuth 2, OpenID Connect, and SAML 2

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2023

Y. Wilson, A. HingnikarSolving Identity Management in Modern Applicationshttps://doi.org/10.1007/978-1-4842-8261-8_5

5. OAuth 2 and API Authorization

Yvonne Wilson¹   and Abhishek Hingnikar²

(1)

San Francisco, CA, USA

(2)

London, UK

 

The possession of great power necessarily implies great responsibility.

—William Lamb, British Member of Parliament, Home Secretary, and Prime Minister. From a speech in the House of Commons, 1817

Modern applications are often designed around APIs. APIs enable applications to reuse logic and take advantage of innovative services. APIs provide access to valuable data or services, so they typically need to restrict API access to authorized ...