Some of the following is excerpted from my new book Learning Digital Identity from O'Reilly Media. OAuth was invented for a very specific purpose: to allow people to control access to resources associated with their accounts, without requiring that they share authentication factors. A primary use case for OAuth is accessing data in an account using an API. For example, the