Skip to content

Commit

Permalink
Update draft-ietf-oauth-v2-1.md
Browse files Browse the repository at this point in the history
  • Loading branch information
aaronpk authored Jan 9, 2025
1 parent d85c188 commit 2a3c237
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion draft-ietf-oauth-v2-1.md
Original file line number Diff line number Diff line change
Expand Up @@ -264,7 +264,9 @@ owner, or on behalf of itself.

OAuth is an authorization protocol, not an authentication protocol, as OAuth does not define the necessary components to achieve user authentication.
An authentication protocol is necessary if the goal is to authenticate users. An example is OpenID Connect {{OpenID}}, which builds on OAuth to provide the security
characteristics and necessary components required of an authentication protocol. The
characteristics and necessary components required of an authentication protocol.

The
access token represents the authorization granted to the client. It is a common
practice for the client to present the access token to a proprietary API which
returns a user identifier for the resource owner, and then using the result of
Expand Down

0 comments on commit 2a3c237

Please sign in to comment.