Understanding OAuth2 the Simple Way
You are building a side project and want users to log in with their Google accounts instead of making up yet another password they'll forget. So you open the OAuth2 spec. Ten minutes later, you are staring blankly at a wall of terminology involving "Resource Owners," "Authorization Servers," and "Grant Types," wondering if you actually need to learn cryptography just to let someone sign in with Google.
Most explanations of OAuth2 are written by security architects for other security architects. They read like legal contracts disguised as technical docs.
Let's skip the academic definitions. Here is how OAuth2 actually works when you're building a web app, without the enterprise fluff.
The Valet Key Analogy
