Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

2
  • While you are right that oauth(2) is mainly used in different scenarios. However, oauth2 supports the "credentials" grant-type which essentially grants the resource owner access to their own resources. This closely resembles a traditional login where the refresh-token/auth-token is the quivalent to a session cookie. Commented Jan 6, 2020 at 15:47
  • @marstato this is something I did not know about and certainly interesting to know but I'm not sure it applies. The resource owner in this case is a completely separate entity and needs to push updates into our database via an API call, so the resource owner (partner company) doesn't need access to its own resources, it needs access to update our server with its resources. Commented Jan 6, 2020 at 18:00