OAuth 2.1

OAuth 2.1 is the consolidation of OAuth 2.0 and its best practices into a single standard. It allows third-party applications to grant limited access to an HTTP service through an authorization server.

When to Use

• Social Login: "Log in with Google/Facebook".
• Third-Party Access: Giving a budgeting app access to your bank APIs.
• Microservices: Service A accessing Service B on behalf of a user.

Quick Start (Authorization Code Flow with PKCE)