What is OAuth?

Every time you click "Sign in with Google" or "Connect your GitHub account," you are using OAuth. You have used it hundreds of times. Most developers have implemented it at least once. And the April 2026 Vercel breach, which exposed credentials for hundreds of organizations, happened because of a single misconfigured OAuth permission.

That is worth understanding properly.

The Problem OAuth Solves

Before OAuth existed, the common way to let a third-party app access your data was to give it yo

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.