OAuth
OAuth (Open Authorization) is an open standard for securely granting one system access to another's data or services without sharing the actual password. Instead of credentials, the requesting system obtains a time-limited access token that authorises specific, scoped access — so a partner or application can act on an account's behalf within defined limits, and access can be revoked without changing passwords.
OAuth (commonly OAuth 2.0) is the dominant way modern APIs are secured: when a logistics or ERP system calls a carrier's or partner's API, it typically authenticates and receives a token, then includes that token with each request to prove it is authorised. This provides secure, controlled, auditable access without embedding passwords in integrations. Understanding OAuth is important when connecting to APIs, since it governs how the connection is authorised and secured. It is a foundational piece of secure system integration, working alongside REST, JSON and HTTPS to make API connectivity both easy and safe. It underpins the trust layer of modern interfaces.
APIs need to be secured without every integration holding a password — OAuth solves that with scoped, revocable access tokens, which is why it is how nearly all modern APIs are authorised. When connecting a logistics or ERP system to a carrier or partner API, OAuth governs the trust and security of that link, making it essential to safe system integration.
What is an access token?
A time-limited, scoped credential issued via OAuth that authorises specific API access without exposing the account password.
Why use OAuth for APIs?
It grants controlled, revocable, auditable access without sharing passwords, making API connections both secure and manageable.