OAuth

You might say

How do I add a sign in with WeChat button to the page?

A protocol for granting a client scoped access to protected resourcesAfter a user approves, an OAuth access token lets a client access a protected resource within its granted scope; the token itself is not generic proof of identity. A site using a provider account for sign-in commonly also needs OpenID Connect or the provider's explicit identity mechanism, then maps that identity to its own user.

Know first

Authentication

OAuthOAuth 2.0

Self-registration and third-party authorization: two sign-in paths

files.example.com · Authorization

Allow Photo Organizer to view your albums?

Scope: read albums　　Not allowed: delete photos

User approves · returns a scoped access token

OAuth lets a user authorize a client to access a protected resource within a scope. An access token is an access credential, not generic proof of user identity.

What the client receives after OAuth authorization

Jump to the third party to confirm: Clicking sign in with WeChat jumps to WeChat's authorization page; the user approves on a platform they know.

Return with the result: After approval you return to the site with an authorization result; the whole flow never touches the user's WeChat password.

The site still identifies the user: The site uses its own user records to recognize who this is; OAuth grants resource access; it is not authentication and does not replace the site's account system.

Quick checkChoose the best answer

The product wants third-party sign-in but will keep email registration. What should be confirmed first?

Once OAuth is added, no account system is needed at allThe user tells the site their WeChat password to sign inConfirm the provider identity mechanism as well as authorization, then map that identity to the site user

You can say this to an AI Agent

Add a third-party sign-in option. First confirm whether the provider uses OpenID Connect or its official identity API; configure the authorization callback, verify the identity, and then match or create a site user. Keep email registration unchanged and explain how to verify successful sign-in and failure messages.

Learn next

1Authentication→2API Key→

Recommended tool

Web fine-tuning tool · Selector Pro

Select page elements for precise AI edits

Click a button, text, or card, note the change, then copy its exact location to AI.

Open Selector Pro website