adds how does oauth work

content/how-does-oauth-work/index.md

@@ -0,0 +1,106 @@
+---
+title: How the Heck Does OAuth Work?
+date: "2024-05-24"
+description: "In this blog we do a detailed technical overview of OAuth, explaining its evolution, various flows, and practical applications. It includes diagrams and real-world examples to enhance understanding."
+cover: "how-to-customise-supertokens-apis.png"
+category: "programming"
+author: "Joel Coutinho"
+---
+
+OAuth is a powerful and flexible protocol for authorization. To understand its technical aspects better, it's important to dive into its details, explore its flows with diagrams, and see real-world examples of OAuth in action.
+
+## Table of Contents
+- [What is OAuth and Why is it Important?](#what-is-oauth-and-why-is-it-important)
+- [The OAuth Flow: A Step-by-Step Walkthrough](#the-oauth-flow-a-step-by-step-walkthrough)
+- [Examples of OAuth applied in Various Scenarios](#examples-of-oauth-applied-in-various-scenarios)
+- [Conclusion](#conclusion)
+
+## What is OAuth and Why is it Important?
+
+OAuth is an open standard for access delegation commonly used as a way to grant websites or applications limited access to a user's information without exposing passwords. It plays a crucial role in modern web and mobile applications by enabling secure authorization.
+
+### Evolution of OAuth
+
+OAuth has evolved from its inception to its current version, OAuth 2.0. The original OAuth 1.0, though revolutionary, had several limitations, such as the complexity of obtaining request tokens and exchanging them for access tokens. OAuth 2.0, on the other hand, simplified this process and introduced the use of access tokens and refresh tokens.
+
+### OAuth 1.0 vs OAuth 2.0
+
+- **OAuth 1.0:** Introduced the concept of access delegation but was complex and had significant limitations.
+- **OAuth 2.0:** Simplified the process, introduced access and refresh tokens, and made it easier to implement.
+
+| Feature                     | OAuth 1.0                          | OAuth 2.0                          |
+|-----------------------------|------------------------------------|------------------------------------|
+| Token Types                 | Request token, Access token        | Access token, Refresh token        |
+| Complexity                  | High                                | Low                                |
+| Security                    | Signed requests                    | Bearer tokens                      |
+| Flexibility                 | Limited                             | Highly flexible                    |
+| Grant Types                 | Single grant type                  | Multiple grant types               |
+
+## The OAuth Flow: A Step-by-Step Walkthrough
+
+Understanding the OAuth flow is crucial for implementing and troubleshooting OAuth-based systems. Here, we provide a detailed walkthrough of the OAuth authorization process with diagrams.
+
+### Authorization Code Grant
+
+The Authorization Code Grant is the most common OAuth 2.0 flow. It is used by web applications and involves the following steps:
+
+1. **User Authorization:** The user is redirected to the authorization server to grant access.
+2. **Authorization Grant:** If the user grants access, the authorization server redirects the user back to the client with an authorization code.
+3. **Access Token Request:** The client requests an access token from the authorization server using the authorization code.
+4. **Access Token Response:** The authorization server responds with an access token.
+
+![Authorization Code Grant Flow](https://supertokens.com/images/oauth-authorization-code-grant.png)
+
+### Implicit Grant
+
+The Implicit Grant is used for client-side applications where the client directly receives the access token without an intermediate authorization code.
+
+1. **User Authorization:** The user is redirected to the authorization server to grant access.
+2. **Access Token:** If the user grants access, the authorization server redirects the user back to the client with the access token in the URL fragment.
+
+### Resource Owner Password Credentials Grant
+
+This grant type is used when the user trusts the client with their credentials. The client directly receives the user's credentials and exchanges them for an access token.
+
+1. **Credentials Submission:** The client collects the user's credentials and sends them to the authorization server.
+2. **Access Token Response:** The authorization server validates the credentials and responds with an access token.
+
+### Client Credentials Grant
+
+The Client Credentials Grant is used for server-to-server communication where the client uses its own credentials to obtain an access token.
+
+1. **Token Request:** The client sends its credentials to the authorization server.
+2. **Token Response:** The authorization server validates the client's credentials and responds with an access token.
+
+### Device Code Grant
+
+The Device Code Grant is used for devices with limited input capabilities. It involves the following steps:
+
+1. **Device Authorization:** The device requests authorization from the authorization server and receives a device code.
+2. **User Authorization:** The user visits a URL on a different device, enters the code, and grants access.
+3. **Access Token Request:** The device polls the authorization server until the user grants access.
+4. **Access Token Response:** The authorization server responds with an access token once access is granted.
+
+## Examples of OAuth applied in Various Scenarios
+
+OAuth can be applied in various scenarios, from single sign-on (SSO) to granting third-party applications access to user data. Here are some examples:
+
+### Single Sign-On (SSO)
+
+Single Sign-On allows users to log in to multiple applications with a single set of credentials. For example, logging into a new application using Google. This reduces the need to remember multiple passwords and improves the user experience.
+
+### Third-Party Application Access
+
+OAuth enables third-party applications to access user data on behalf of the user. For example, a social media management tool accessing your Twitter account to schedule posts.
+
+### API Access
+
+APIs often use OAuth to secure access. For example, a weather application using OAuth to request weather data from a weather API.
+
+## Conclusion
+
+OAuth is a versatile and essential protocol for modern web and mobile applications. It enables secure authorization and access delegation, improving both security and user experience. Understanding the different OAuth flows and how to apply them in various scenarios is crucial for developers.
+
+To implement OAuth using SuperTokens, check out our [documentation](https://supertokens.com/docs/thirdparty/introduction). For further reading, you can explore our blogs on [OAuth vs JWT](https://supertokens.com/blog/oauth-vs-jwt), [OAuth vs OIDC](https://supertokens.com/blog/oauth-vs-oidc), and [OAuth 2 vs Session Management](https://supertokens.com/blog/oauth-2-vs-session-management).
+
+For more information on OAuth, visit [Wikipedia](https://en.wikipedia.org/wiki/OAuth) or check out this simple explanation on [Stack Overflow](https://stackoverflow.com/a/4201618).

content/oauth-grant-types/index.md

@@ -1,7 +1,7 @@
 ---
 title: "Choosing The Right OAuth Grant Types For Your User"
 description: "Discover the ins and outs of OAuth grant types and learn how to implement secure, user-friendly authentication flows. This comprehensive guide covers the different OAuth grant types, their best use cases, and practical tips for customizing your authorization flow."
-date: "2024-06-17"
+date: "2024-05-17"
 cover: "oauth-grant-types.png"
 category: "featured"
 author: "Joel Coutinho"

content/oauth-token/index.md

@@ -1,7 +1,7 @@
 ---
 title: "Understanding & Using OAuth Tokens For Easy & Secure Login "
 description: "Explore OAuth tokens in web security, their types, benefits, and best practices. Learn to implement and customize OAuth flows for optimal security and user experience."
-date: "2024-07-16"
+date: "2024-05-16"
 cover: "oauth-token.png"
 category: "featured"
 author: "Joel Coutinho"

static/blog-seo/config.json

@@ -1297,5 +1297,27 @@
         ],
         "title": "Choosing The Right OAuth Grant Types For Your User",
         "schema": "<script type=\"application/ld+json\">\n{\"@context\":\"https://schema.org\",\"@type\":\"Article\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"https://supertokens.com/blog/oauth-grant-types\"},\"headline\":\"Choosing The Right OAuth Grant Types For Your User\",\"image\":\"https://supertokens.com/blog-meta-images/oauth-grant-types.png\",\"author\":{\"@type\":\"Organization\",\"name\":\"SuperTokens\",\"url\":\"https://supertokens.com\"},\"publisher\":{\"@type\":\"Organization\",\"name\":\"SuperTokens\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://supertokens.com/static/assets/dark-home/logo.png\"}}}</script>"
+    },{
+        "path": "/blog/how-does-oauth-work",
+        "metaTags": [
+            "<meta name=\"author\" content=\"Joel Coutinho\" /> ",
+            "<meta name=\"description\" content=\"In this blog we do a detailed technical overview of OAuth, explaining its evolution, various flows, and practical applications. It includes diagrams and real-world examples to enhance understanding.\" />",
+            "",
+            "<meta name=\"keywords\" content=\"OAuth grant types, OAuth code grant, client credential grant, implicit grant\" />",
+            "<!--OG Tags-->",
+            "<meta property=\"og:title\" content=\"How the Heck Does OAuth Work?\" />",
+            "<meta property=\"og:type\" content=\"article\" />",
+            "<meta property=\"og:url\" content=\"https://supertokens.com/blog/how-does-oauth-work\" />",
+            "<meta property=\"og:description\" content=\"In this blog we do a detailed technical overview of OAuth, explaining its evolution, various flows, and practical applications. It includes diagrams and real-world examples to enhance understanding.\" /\"/>",
+            "<meta property=\"og:image\" content=\"https://supertokens.com/blog-meta-images/how-does-oauth-work.png\" />",
+            "",
+            "<meta name=\"twitter:card\" content=\"summary_large_image\" />",
+            "<meta name=\"twitter:title\" content=\"In this blog we do a detailed technical overview of OAuth, explaining its evolution, various flows, and practical applications. It includes diagrams and real-world examples to enhance understanding.\" />",
+            "<meta name=\"twitter:url\" content=\"https://supertokens.com/blog/how-does-oauth-work\" />",
+            "<meta name=\"twitter:image\" content=\"https://supertokens.com/blog-meta-images/how-does-oauth-work.png\" /> ",
+            "<!--OG Tags-->"
+        ],
+        "title": "How the Heck Does OAuth Work?",
+        "schema": "<script type=\"application/ld+json\">\n{\"@context\":\"https://schema.org\",\"@type\":\"Article\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"https://supertokens.com/blog/how-does-oauth-work\"},\"headline\":\"How the Heck Does OAuth Work?\",\"image\":\"https://supertokens.com/blog-meta-images/how-does-oauth-work.png\",\"author\":{\"@type\":\"Organization\",\"name\":\"SuperTokens\",\"url\":\"https://supertokens.com\"},\"publisher\":{\"@type\":\"Organization\",\"name\":\"SuperTokens\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://supertokens.com/static/assets/dark-home/logo.png\"}}}</script>"
     }
 ]

static/blog-seo/sitemapconfig.json

@@ -151,5 +151,8 @@
     },
     {
         "location": "https://supertokens.com/blog/oauth-grant-types"
+    },
+    {
+        "location": "https://supertokens.com/blog/how-does-oauth-work"
     }
 ]