> That’s what Oauth is though.
Splitting hairs but no, Oauth has nothing to do with authentication. An introductory article like this should address the distinction between authentication and authorization in the first section IMO.
Splitting hairs but no, Oauth has nothing to do with authentication. An introductory article like this should address the distinction between authentication and authorization in the first section IMO.
Distinction which is totally useless in practice as you certainly won’t have authorization without authentication.
At that point, the separation is more about capabilities/responsibilities than "does it happen?"
(This is what I do in my day job.)