Konubinix' opinionated web of thoughts

Authentication With OAuth 2.0

Fleeting

developers and API providers to incorrectly conclude that OAuth is itself an authentication protocol and to mistakenly use it as such.

https://oauth.net/articles/authentication/

OAuth 2.0 is not an authentication protocol

https://oauth.net/articles/authentication/

Much of the confusion comes from the fact that OAuth is used inside of authentication protocols, and developers will see the OAuth components and interact with the OAuth flow and assume that by simply using OAuth, they can accomplish user authentication

https://oauth.net/articles/authentication/

Authentication in the context of a user accessing an application tells an application who the current user is and whether or not they’re present

https://oauth.net/articles/authentication/

Authentication is all about the user and their presence with the application,

https://oauth.net/articles/authentication/