مراجعة مسارات OAuth

في هذا الدرس

choose the right OAuth 2.0 flow per scenario.

الموضوعات المخطط لها

• User-facing apps (web, mobile, SPA): authorization code flow with PKCE; no implicit flow.
• Machine-to-machine: client credentials flow; there is no user.
• Delegated access ("on behalf of the user" across services): token exchange, or forwarding the user's token where policy allows.
• OIDC adds identity (ID token) on top of OAuth; access tokens are for APIs.
• Check current OAuth security guidance (for example the OAuth 2.1 draft and best-practice documents) before recording.