API Design · Junior · Question 34 of 75

What is OAuth 2.0 mainly about?

1Generating API documentation
2Encrypting databases
✓Correct answer: Delegated authorization: letting an app access a user's resources on another service without getting the user's password

Explanation

'Sign in with Google' uses OAuth 2.0 together with OpenID Connect. Public clients like SPAs should use the authorization code flow with PKCE.

Further reading

Test yourself

Take the API Design · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.