OAuth2 overview in Flask - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is OAuth2 in simple terms?

OAuth2 is a way for apps to get permission to access your info on another app without sharing your password. It's like giving a valet key to your car instead of the full key.

beginner

Name the four main roles in OAuth2.

The four main roles are: Resource Owner (you), Client (the app asking for access), Authorization Server (checks permission), and Resource Server (holds the data).

beginner

What is an access token in OAuth2?

An access token is like a temporary pass that the client app uses to access your data from the resource server after you say yes.

intermediate

How does OAuth2 improve security compared to sharing passwords?

OAuth2 lets apps access only what you allow without sharing your password. If the app is bad, your password stays safe and you can revoke access anytime.

beginner

In Flask, which library helps implement OAuth2 easily?

Flask-Dance is a popular library that helps Flask apps use OAuth2 to connect with services like Google or GitHub easily.

Which OAuth2 role is responsible for holding the user's data?

A Resource Server

B Client

C Authorization Server

D Resource Owner

The Resource Server holds the user's data and responds to requests with a valid access token.

What does the client receive after the user grants permission in OAuth2?

A Access Token

B Password

C Refresh Token

D Authorization Code

The client receives an access token to access the user's data on the resource server.

Which OAuth2 role verifies the user's permission?

A Client

B Resource Owner

C Resource Server

D Authorization Server

The Authorization Server checks if the user has given permission to the client.

Why is OAuth2 safer than sharing passwords?

A It requires no user permission

B It uses temporary tokens instead of passwords

C It shares passwords securely

D It stores passwords in the client app

OAuth2 uses temporary tokens, so passwords are never shared with the client app.

Which Flask library helps implement OAuth2 easily?

A Flask-SQLAlchemy

B Flask-Login

C Flask-Dance

D Flask-Mail

Flask-Dance is designed to help Flask apps use OAuth2 with external services.

Explain the main roles in OAuth2 and their responsibilities.

Think about who owns data, who asks for it, and who controls access.

Describe how OAuth2 improves security when apps need access to your data.

Compare it to giving a valet key instead of your full car key.