// Technology

OAuth 2.x
Secure access without password hassle

Who gets access, and to precisely what? OAuth 2.x is the standard modern applications use to arrange access: from logging in with your Microsoft account to API access for partners.

How we use it
Illustration: the orange Tulipsoft figure builds with OAuth 2.x while the blue client watches

// What it is

What is OAuth 2.x?

OAuth 2.x is the authorisation protocol behind almost every modern login and API integration. Instead of sharing passwords, you give controlled access with tokens that are limited in time and rights. Together with OpenID Connect, it also arranges single sign-on with, for example, Microsoft Entra or Google Workspace.

// Use

How we use it

  • Single sign-on

    Staff and customers log in with the account they already have. No loose password left lying around.

  • API access with limits

    Partners get exactly the rights they need, temporary and revocable.

  • Checking the implementation

    We test the chosen flows, token storage and rights against the provider's documentation and relevant OWASP guidelines.

// More technology

What else we build with

Pascal writing 'Fancy a coffee?' on a flip chart

Want to discuss OAuth 2.x for your project?

Tell us what you want to achieve. In half an hour we'll know together whether and how we can help.

Contact