Getting Started

Below are some guides to OAuth 2.0 which cover many of the topics needed to understand and implement clients and servers.

OAuth 2.0 Simplified

OAuth 2.0 Simplified, written by Aaron Parecki, is a guide to OAuth 2.0 focused on writing clients that gives a clear overview of the spec at an introductory level.

• Roles: Applications, APIs and Users
• Creating an App
• Authorization: Obtaining an access token
  • Web Server Apps
  • Single-Page Apps
  • Mobile Apps
  • Others
• Making Authenticated Requests
• Differences from OAuth 1.0
  • Authentication and Signatures
  • User Experience and Alternative Authorization Flows
  • Performance at Scale
• Resources

OAuth 2.0 Servers

OAuth 2.0 Servers, written by Aaron Parecki and published by Okta, is a guide to building an OAuth 2.0 server, including many details that are not part of the spec.

Code and Libraries

There are many client and server libraries in multiple languages to get you started quickly.

Books

You can find some excellent books on OAuth 2.0.

Consulting

Find an OAuth consultant to help your organization.