Using OAuth tokens

- [Narrator] OAuth 2 has become a very common way…to secure API calls.…You've probably already been exposed to it…when you've used those sign in with Google…or Facebook or Twitter options on an application.…Those kind of applications typically use OAuth 2 workflows…to authorize the application.…We won't dig into all the details on this,…but let's at least get a basic understanding of it.…In OAuth 2, there are usually…three different pieces involved.…The first piece is the application that you're using.…Once you tell the application that you want to use OAuth,…it will send a request to the Auth server.…

And in essence this request says to the server,…"Hey, I'm Dave, and here's my password."…The server sends back a token that can be used…to authenticate and authorize you.…So this token can then be used in API calls…to the server itself or to the web service.…Essentially what you're doing at that point is saying…"Hey, here's my token that says that I am"…"who I say I am, and that allows me to do"…"the actions that it allows me to,"…