Skip to content

Commit ead41a6

Browse files
authored
Update +page.markdoc
1 parent 91e6242 commit ead41a6

File tree

1 file changed

+20
-20
lines changed

1 file changed

+20
-20
lines changed

src/routes/blog/post/understand-oauth2/+page.markdoc

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -11,34 +11,34 @@ unlisted: true
1111
category: product
1212
---
1313

14-
In today’s interconnected app ecosystem, users expect seamless, secure access across services. OAuth 2.0 has emerged as the industry standard for handling secure delegated access, making it a critical protocol for developers to understand.
14+
In today’s interconnected app ecosystem, users expect seamless, secure access across services. OAuth2 has emerged as the industry standard for handling secure delegated access, making it a critical protocol for developers to understand.
1515

16-
This guide explains OAuth 2.0, how it works, the different flows available, and when to use each one, helping you build secure, scalable authorization experiences.
16+
This guide explains OAuth2, how it works, the different flows available, and when to use each one, helping you build secure, scalable authorization experiences.
1717

18-
# What is OAuth 2.0?
18+
# What is OAuth2?
1919

20-
OAuth 2.0 is an open standard for authorization. It allows users to grant limited access to their resources on one service to another service without sharing credentials.
20+
OAuth2 is an open standard for authorization. It allows users to grant limited access to their resources on one service to another service without sharing credentials.
2121

22-
Rather than handing out a username and password, users authorize apps to act on their behalf using access tokens. OAuth 2.0 ensures that:
22+
Rather than handing out a username and password, users authorize apps to act on their behalf using access tokens. OAuth2 ensures that:
2323

2424
- Apps never directly handle user credentials.
2525
- Users retain control over what permissions they grant.
2626
- Access can be easily revoked.
2727

28-
# Core components of OAuth 2.0
28+
# Core components of OAuth2
2929

3030
Before diving into the flows, it's important to understand the key players:
3131

32-
- **Resource Owner**: The user who authorizes access to their data.
32+
- **Resource owner**: The user who authorizes access to their data.
3333
- **Client**: The application requesting access.
34-
- **Authorization Server**: Issues access tokens after authenticating the user.
35-
- **Resource Server**: Hosts the protected resources.
34+
- **Authorization server**: Issues access tokens after authenticating the user.
35+
- **Resource server**: Hosts the protected resources.
3636

3737
These components work together to ensure secure authorization across systems.
3838

3939
Refer to the OAuth2 [documentation](/docs/product/auth/oauth2) for complete technical details.
4040

41-
# How OAuth 2.0 works: A simple flow
41+
# How OAuth2 works: A simple flow
4242

4343
1. **Authorization request**: The client asks the resource owner for permission.
4444
2. **Authorization grant**: If the user consents, the server issues a grant (authorization code, token, etc.).
@@ -47,9 +47,9 @@ Refer to the OAuth2 [documentation](/docs/product/auth/oauth2) for complete tech
4747

4848
Tokens are typically short-lived and scoped, meaning they only allow the operations the user approved.
4949

50-
# Major OAuth 2.0 flows
50+
# Major OAuth2 flows
5151

52-
OAuth 2.0 offers different "flows" to accommodate various scenarios. Here's a breakdown of the major ones:
52+
OAuth2 offers different "flows" to accommodate various scenarios. Here's a breakdown of the major ones:
5353

5454
## 1. Authorization code flow
5555

@@ -123,36 +123,36 @@ OAuth 2.0 offers different "flows" to accommodate various scenarios. Here's a br
123123

124124
[Appwrite Auth](/products/auth) supports all major OAuth2 flows, making it easy to integrate secure authentication into any app
125125

126-
# OAuth 2.0 Tokens: Access and refresh
126+
# OAuth2 Tokens: Access and refresh
127127

128-
OAuth 2.0 commonly uses two types of tokens:
128+
OAuth2 commonly uses two types of tokens:
129129

130130
- **Access Token**: Grants access to protected resources.
131131
- **Refresh Token**: Used to obtain new access tokens without re-authenticating the user.
132132

133133
Tokens are often JWTs (JSON Web Tokens) containing claims about the user and the permissions granted.
134134

135-
# When to Use OAuth 2.0
135+
# When to Use OAuth2
136136

137137
- **Third-party integrations**: Allowing users to connect external services securely.
138138
- **APIs**: Protecting APIs from unauthorized access.
139139
- **Mobile and web Apps**: Enabling secure login and data access without managing credentials.
140140
- **B2B applications**: Secure service-to-service communication.
141141

142-
# Common OAuth 2.0 pitfalls
142+
# Common OAuth2 pitfalls
143143

144144
- **Over-scoped tokens**: Granting too many permissions.
145145
- **Insecure storage**: Storing tokens in insecure locations (e.g., localStorage without encryption).
146146
- **Ignoring token expiration**: Failing to handle token refresh flows.
147147
- **Misusing Implicit Flow**: Using legacy flows where better options (PKCE) are available.
148148

149-
# OAuth 2.0: A key enabler of modern security
149+
# OAuth2: A key enabler of modern security
150150

151-
OAuth 2.0 powers secure, flexible authorization across the modern internet. Understanding its core flows and best practices helps developers build safer, more user-friendly apps.
151+
OAuth2 powers secure, flexible authorization across the modern internet. Understanding its core flows and best practices helps developers build safer, more user-friendly apps.
152152

153-
Choosing the proper OAuth 2.0 flow based on your application's architecture and user needs is critical to balancing security, usability, and scalability.
153+
Choosing the proper OAuth2 flow based on your application's architecture and user needs is critical to balancing security, usability, and scalability.
154154

155-
Ready to explore OAuth 2.0 more deeply? Check
155+
Ready to explore OAuth2 more deeply? Check
156156

157157
- [Appwrite Authentication docs](/docs/products/auth)
158158
- [Overview of all the OAuth providers](/integrations#auth)

0 commit comments

Comments
 (0)