OAuth2

An industry-standard authorization framework that lets applications securely access user resources without exposing raw passwords.

OAuth 2.0 is the gold standard for delegated authority on the web, defined by the IETF under RFC 6749. Instead of sharing master credentials, client applications obtain scoped, temporary access tokens (often JSON Web Tokens) from an authorization server. By separating the roles of the resource owner, client, and resource server, OAuth 2.0 powers secure integrations across major ecosystems (including Google, Microsoft, and GitHub) using specialized flows like Authorization Code with PKCE for mobile and single-page apps.

https://oauth.net/2/