OAuth Explained in 3 Minutes: Access Without Sharing Passwords

How can an app read your calendar without receiving your Google password? This 3-minute OAuth explainer makes permissions, tokens, and secure app connections easy to understand. Follow PlanPal, a fictional scheduling app, from its first permission request to a protected calendar API. We cover the everyday idea behind OAuth 2.0, then introduce PKCE, OpenID Connect, refresh tokens, and service-to-service access. In this video: • OAuth as a digital valet key • Scopes and the four OAuth roles • Authorization codes and access tokens • Refresh tokens and disconnecting apps • PKCE, pronounced “pixie” • OAuth versus OpenID Connect • Client credentials and practical security habits CHAPTERS 00:00 Why apps should not get your password 00:12 OAuth: the digital valet key 00:25 Scopes and a calendar example 00:39 The four OAuth roles 00:51 Consent and the authorization code flow 01:19 Using an access token 01:33 Expiration, refresh tokens, and revocation 01:47 PKCE explained simply 02:05 OAuth versus OpenID Connect 02:19 Service-to-service OAuth 02:31 Practical security habits 02:47 The takeaway Which permission would make you hesitate before connecting an app? Share your example in the comments. Subscribe to Tech Unknotted for everyday technology, clearly explained.    / @techunknotted   SOURCES AND FURTHER READING OAuth 2.0 framework: https://www.rfc-editor.org/rfc/rfc674... Bearer tokens: https://www.rfc-editor.org/rfc/rfc675... PKCE: https://www.rfc-editor.org/rfc/rfc763... Current OAuth security guidance: https://www.rfc-editor.org/rfc/rfc970... Token revocation: https://www.rfc-editor.org/rfc/rfc700... OpenID Connect: https://openid.net/developers/how-con... Google's OpenID Connect documentation: https://developers.google.com/identit... Production note: This video uses synthetic English narration and original animated diagrams. PlanPal and the permission screens are illustrative. This is a conceptual introduction, with selected advanced ideas, rather than a complete implementation tutorial. #OAuth #CyberSecurity #TechExplained