OAuth is a standardized framework for authorization that separates user credentials from access, allowing apps to obtain access to user data without exposing sensitive login information. It works by having the user grant specific permissions-such as reading email or posting on their behalf-for a limited period.
By defining clear roles like client, resource owner, authorization server, and resource, OAuth makes it straightforward to implement secure delegation across web, mobile, and desktop applications. Version 2.0, the dominant specification today, provides various grant types that suit anything from traditional web apps to devices without browsers (via PKCE or Device Flow).
In practice, OAuth is used widely by major providers like Google, Facebook, GitHub, and Microsoft to power "Sign in with..." flows, API access, and service integrations. Its flexibility, scalability, and strong security model make it a core building block of modern identity and federated authentication solutions.

