Digitorn
Digitorn
All terms
Security

OAuth flow

A multi-step authentication flow where the user grants the agent scoped access to a third-party service.

also known as: OAuth2 authorization
In depth

OAuth is how the user authorises an agent to act on their behalf in Slack, Notion, GitHub, Google, Discord. The user clicks a link, the third-party service shows a permission screen, the user approves, the runtime receives a token and stores it in the credential vault. A background loop refreshes tokens before they expire so agents do not break overnight.

Related concepts
Read the deep dive

How credentials work on Digitorn: an encrypted vault driven from YAML

Read article
Newsletter

Get the next post in your inbox.

Engineering notes from the Digitorn team. No marketing, no launch announcements, no "10 prompts that will change your life". Just the things we write that we'd want to read.

One-click unsubscribe. We never share your address. Powered by our own infrastructure, not a tracker.

More in Security

Credential vault/glossary/credential-vaultEnvelope encryption/glossary/envelope-encryptionKMS/glossary/kmsPer-user scope/glossary/per-user-scope