Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OAuth 2.0 is not an authentication protocol #4

Closed
aliasaria opened this issue Feb 24, 2017 · 4 comments
Closed

OAuth 2.0 is not an authentication protocol #4

aliasaria opened this issue Feb 24, 2017 · 4 comments

Comments

@aliasaria
Copy link

OAuth docs clearly state:

"OAuth 2.0 is not an authentication protocol."

Here: https://oauth.net/articles/authentication/

So perhaps it would be better for you to change the text to "OAuth is an authorization protocol" and then perhaps link to the above document for the sake of pedants.

@teesloane
Copy link
Owner

That sounds good! Thanks for point that out. I will add this shortly.

@rohannair
Copy link

@aliasaria @teesloane - might be even better to go into the difference of authorization vs authentication

Authentication - Proving who you are
Authorization - Determining what you have permission to do

It's a really important difference.

P.S. @aliasaria love that you're still kicking it on Github haha

@teesloane
Copy link
Owner

@aliasaria @rohannair

These are both great points and I will certainly make some amendments. Thanks for the input!

@dhuyen79
Copy link

5715e93

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants