User Auth Open Authentication (OAuth2)
Introduction
OAuth2 (Open Authentication) is the open industry-standard protocol for secure authorization of clients. It can be used as a way for users to grant web services or applications access to their data stored in Myota Vault. The use of OAuth2 in Myota Vault greatly enhances security while facilitating the integration of third party applications or web services:
-
Connect Myota Vault apps (Desktop, Android, iOS) through a standardized and secure authorization flow.
-
Provide a user authorization interface for developers to facilitate the integration of Myota Vault in third party applications.
Benefits Provided by the OAuth2 Interface
-
No user passwords are being stored in Myota Vault clients or third party web applications
Instead of connecting clients with username/password, a user only needs to provide the information once in the browser. The respective client is then provided with a unique access token which is used for future connections to the Myota Vault. Myota Vault apps or third party applications never get to know the actual login credentials.
-
The use of different access tokens per client provides the ability to selectively revoke user sessions.
When using OAuth2 a unique access token is generated for each device or third party application. Users can check their authorized clients in the personal settings and have the ability to selectively invalidate access tokens when e.g. a device is lost. This strengthens control and access security significantly.