OAuth is a delegated authorization framework (not a protocol) for REST/APIs. It enables apps to obtain limited access (scopes) to a user’s data (on services like Facebook, Github, DigitalOcean) without giving away a user’s password.
👍 It decouples authentication from authorization and supports multiple use cases addressing different device capabilities