Skip to content

Glossary: Web App Security and Authentication

Client

Also written: resource owner, client id, client secret

In OAuth, the client is the app asking for access (kc-shop) and the resource owner is the user who grants it (Bloom Café). The client secret proves server-to-server requests come from the client.

Where the book teaches it

Related terms

OAuth 2.0Secret