4 ms·
As it is right now, yes. But imagine a scenario where Facebook might implement a child account where a parent has access to monitor the usage. Now there are tw
by mfjordvald 10y ago
As it is right now, yes. But imagine a scenario where Facebook might implement a child account where a parent has access to monitor the usage.
Now there are two people with authorisation to access this Facebook account so the process no longer unique authenticates a single individual.
Of course this is a contrived example and I'm sure there are better examples. But this is why OAuth is authorisation and not authentication and why something like OpenID Connect exists on top of OAuth2.