Skip to content

Glossary: Web App Security and Authentication

OAuth 2.0

Also written: OpenID Connect, OIDC

OAuth 2.0 lets one app act for a user at another service without seeing their password. OpenID Connect adds an ID token saying who signed in.

Where the book teaches it

Related terms

ScopeID tokenAuthorization code flow