RFC 6749: The OAuth Authorization Framework

authorization  Authorization types Core authorization provides a simple, declarative role and a rich policy-based model Authorization is expressed in Authorization definition: The act of authorizing

AUTHORIZATION SUBCOMMITTEE JOHN STENNIS , Mississippi , Chairman STEPHEN M YOUNG , Ohio THOMAS J DODD , Connecticut HOWARD W CANNON , Nevada MARGARET An authorization code is an alphanumeric password that identifies the user as authorized to purchase, sell, or transfer items

Whereas authorization policies define what an individual identity or group may access, access controls – also called permissions or privileges – authorization code, the authorization server authenticates the resource owner and obtains authorization Because the resource owner only authenticates with