Konubinix' opinionated web of thoughts

Authentication With OAuth 2.0

Fleeting

developers and API providers to incorrectly conclude that OAuth is itself an authentication protocol and to mistakenly use it as such.

— https://oauth.net/articles/authentication/

OAuth 2.0 is not an authentication protocol

— https://oauth.net/articles/authentication/

Much of the confusion comes from the fact that OAuth is used inside of authentication protocols, and developers will see the OAuth components and interact with the OAuth flow and assume that by simply using OAuth, they can accomplish user authentication

— https://oauth.net/articles/authentication/

Authentication in the context of a user accessing an application tells an application who the current user is and whether or not they’re present

— https://oauth.net/articles/authentication/

Authentication is all about the user and their presence with the application,

— https://oauth.net/articles/authentication/