OAuth2: How Apps Get Your Permission

Without ever seeing your password

The problem: You want to use a cool app that needs access to your Google Drive. How does it get that access without you handing over your Google password?

The solution: OAuth2 lets you tell Google "hey, give this app permission to my stuff" without the app ever learning your password. You're about to see exactly how.

👤
User (Browser)
That's you
📱
Client App
The app wanting access
🔐
Auth Server
Google, GitHub, etc.
💾
Resource Server
Your actual data