...
From the OAuth 1.0 specification:
OAuth
provides
a
method
for
clients
to
access
server
resources
on
behalf
of
a
resource
owner
(such
as
a
different
client
or
an
end-
user).
It
also
provides
a
process
for
end-users
to
authorize
third-
party
access
to
their
server
resources
without
sharing
their
credentials
(typically,
a
username
and
password
pair),
using
user-
agent
redirectionsredirections.
From the OAuth 2.0 specification:
The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf.
Applications can be authenticated by means of token credentials generated through the OAuth protocol.
...