OAuth 2.0 is an open standard for secure authorization. It allows applications to securely access services or resources on behalf of a user—without the user having to disclose their password.

Instead of a password, OAuth 2.0 uses access tokens. These tokens are issued after user consent and grant the application exactly the permissions the user has authorized.