![When Should OAuth's Password Grant Be Used? [2-Minute OAuth Lesson]](https://www.sakimura.org/wp-content/uploads/2018/09/07-When-to-ROPC_-546x307.jpg)
OAuth has something called the “Resource Owner Password Credential (ROPC) Grant1.” In fact, some banks use it, and I occasionally receive questions from developers who have seen this, such as, “We can use this too, right?”
This YouTube video uses animation to explain what ROPC is and then explains the circumstances in which ROPC may be used. The audio is in English, but Japanese subtitles are also provided, so I hope you will watch it with Japanese subtitles turned on.
Footnotes
Related posts
The Only Case in Which You May Use the Password Grant: A 2-Minute OAuth Lesson
In the previous video, I explained that OAuth's Resource Owner Password Credentials Grant must not be used except for backward compatibility. I then received a question…
[2-Minute OAuth Course] #1 Basic Concepts
I have launched a YouTube series explaining the various concepts of OAuth 2.0. It is titled “OAuth in 2 Minutes.” With each installment consisting of 1…
Identity, Authentication + OAuth = OpenID Connect
This explains what identity is, the relationship between an entity and identity, its relationship with privacy, and its relationship with OpenID Connect, a protocol currently being…