BackendSecurity
OAuth
Also written as OAuth2
A standard protocol that lets users log into a third-party app using an existing account (e.g. 'Sign in with Google') without sharing their password.
Think of it like
Like using your hotel key card, issued by the front desk, to get into your room — you never hand your passport to the room's door lock directly.
Junior or senior?
Junior sounds like
Says 'users click Sign in with Google' and stops there.
Senior sounds like
Can walk through the actual token exchange happening underneath, step by step.
Ask them
“Can you walk me through what actually happens, step by step, when a user clicks 'Sign in with Google'?”