What is the difference between OAuth and OAuth 2.0?

Possible duplicate:
How oauth 2 is different from oauth 1

I know that these 2 are not backward compatible. But, having already implemented OAuth 1.0, is it easy to switch to OAuth 2.0? Thanks

+6
source share
4 answers

OAuth 1.0 and 2.0 are two completely different protocols. However, they are designed to solve almost the same basic set of use cases, and most people developing the new version have working versions 1.0. Therefore, they all made sure that it would be trivial to update.

With 2.0, you get more options when it comes to how you want to issue authentication access tokens. Suppliers with support at the beginning of 2.0 use Bearer tokens, which are sent via HTTPS and do not include cryptography on their own. Another (much better) option is to use MAC tokens, which are similar in design to OAuth 1.0 HMAC-SHA1, but are easier to use (there is no normalization of crazy parameters).

The main difference and where the transition can be more complicated is to deal with large scales. 2.0 handles a scale much better than 1.0 (which actually sucks on it). Therefore, if you need to scale, 2.0 will make your life much easier, but to take advantage of it, you will need to do some work.

+11
source

Why the new version of OAuth and the most important differences can be read here:

Introducing OAuth 2.0 - hueniverse

Edit:

Eran Hammer on OAuth 2.0: The Road to Hell

+2
source

OAuth 2 relies on https for security, you no longer need to "sign" requests, just send your API key and tokens as request parameters.

It is very easy to implement, you do not need libraries or anything like that.

Check out facebook graph api to start playing with OAuth2!

+1
source

OAuth 2.0 is not complete yet, and it is very different from 1.0. Thus, experience 1.0 does not help much for 2.0, although it is a definite help.

As already stated, the main difference is that it uses HTTPS for security, so you no longer need to sign requests. That would be good if not for the XSS and Firesheep attacks!

+1
source

Source: https://habr.com/ru/post/885780/


All Articles