Skip to content
Security·Intermediate·Output based·1 min read

What does OAuth actually solve, compared to a bespoke login form?

Short interview answer

OAuth lets a user grant a third-party application limited access to their data on another service without sharing their password with that application, using delegated authorization tokens instead.

Key takeaway

Explain the underlying mental model clearly, then support it with a concrete example and its trade-offs.

← Back to Authentication: sessions vs. tokens

Related questions