System Design Fundamentals
Vote

0% completed

​

OAuth vs. JWT for Authentication

A set of rules for granting an application limited access to your data, without sharing your password, is called OAuth (a protocol). A way to package and sign information as a compact string is called JWT (JSON Web Token, a token format). The two come up in almost every conversation about web security, and they are often presented as rivals. They are not. They serve different purposes, and real systems often use them together rather than in opposition.

A hotel makes a good analogy. OAuth is the front-desk procedure for issuing a guest a key card without handing over the master key

.....

.....

.....

Like the course? Get enrolled and start learning!
sai manoj

sai manoj

· 2 years ago

OAuth (Open Authorization) is an open standard authorization framework that allows third-party applications to access user data from a service provider without sharing the user's credentials. It enables users to grant limited access to their resources on one site to another site, without exposing their passwords.

How OAuth Works

OAuth operates through a series of steps involving several key components:

  1. Roles in OAuth:
    • Resource Owner: The user who owns the data and grants access to it.
    • Client: The application requesting access to the resource owner's data (e.g., a mobile app or web application).
    • Authorization Server: The server that authenticates the resource owner and issues access tokens to the client.
    • Resource Server: The server th
A

Aniket Joshi

· 2 years ago

The reason I am asking this is , the description in the JWT section says : "..used in authorization..." vs. the use case only mentions about authentication.So, what is it exactly used for?

Show 1 reply