{"id":17290,"date":"2024-05-28T23:39:34","date_gmt":"2024-05-29T06:39:34","guid":{"rendered":"https:\/\/www.pingcap.com\/?p=17290"},"modified":"2024-08-28T02:55:09","modified_gmt":"2024-08-28T09:55:09","slug":"tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience","status":"publish","type":"post","link":"https:\/\/www.pingcap.com\/ko\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/","title":{"rendered":"TiDB Cloud Now Supports OAuth 2.0 for a More Secure Login Experience"},"content":{"rendered":"<p><a href=\"https:\/\/tidbcloud.com\/free-trial\/\">TiDB Cloud<\/a> is a powerful MySQL-compatible database-as-a-service (DBaaS) for diverse industries, trusted by many leading companies such as <a href=\"https:\/\/www.pingcap.com\/ko\/case-study\/catalyst-rearchitects-core-saas-platform-tidb-60x-faster-performance\/\">Catalyst<\/a> \uadf8\ub9ac\uace0 <a href=\"https:\/\/www.pingcap.com\/ko\/case-study\/why-capcom-chose-tidb-cloud-as-its-scalable-managed-database-for-online-game\/\">CAPCOM<\/a>. Today, we&#8217;re thrilled to announce a major update: TiDB Cloud now supports OAuth 2.0!<\/p>\n\n\n\n<p>OAuth 2.0 is a secure authorization protocol that lets you leverage existing login credentials from platforms like Google, Microsoft, and other Single Sign-On (SSO) providers. This gives you:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Easy sign-in: <\/strong>Use your existing logic from platforms like Google or Microsoft to access TiDB Cloud. No more juggling multiple credentials or needing to remember multiple passwords<\/li>\n\n\n\n<li><strong>Enhanced security: <\/strong>OAuth 2.0 eliminates the need to store passwords within TiDB Cloud, reducing the risk of data breaches<\/li>\n<\/ul>\n\n\n\n<p>This post dives into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. We&#8217;ll explore the benefits of OAuth and how to get it set up.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"TiDB_Clouds_Support_for_OAuth_20\"><\/span>TiDB Cloud&#8217;s Support for OAuth 2.0<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>OAuth 2.0 is a secure way to sign in to apps without sharing your password. It lets you grant access to third-party applications, so you can keep track of permissions and enjoy a more secure login experience.<\/p>\n\n\n\n<p>Key benefits of OAuth 2.0 include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\ubcf4\uc548<\/strong>: By using token-based authentication, OAuth 2.0 minimizes the risk of password theft and unauthorized access.<\/li>\n\n\n\n<li><strong>Convenience<\/strong>: Users can grant and revoke access to their data without managing multiple credentials.<\/li>\n\n\n\n<li><strong>Control<\/strong>: Users can specify the exact level of access granted to third-party applications, ensuring only necessary permissions are given.<\/li>\n<\/ul>\n\n\n\n<p>You can learn more about OAuth 2.0 <a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/oauth2\">\uc5ec\uae30<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"OAuth_20_Grant_Types_in_TiDB\"><\/span>OAuth 2.0 Grant Types in TiDB<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>The OAuth 2.0 standard specifies several different grant types. TiDB Cloud currently supports two of these types: Authorization Code and Device Code.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:100%\">\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Grant Type<\/strong><\/td><td><strong>Description<\/strong><\/td><td><strong>Example Use Case<\/strong><\/td><\/tr><tr><td>Device Code<\/td><td>Weak input device, the user confirms the authorization code, and the developer application obtains the token.<\/td><td>Limited input devices such as smart TVs and IoT devices<br>Applications running on TiDB access TiDB Cloud API<\/td><\/tr><tr><td>Authorization Code<\/td><td>User authorization, generate an authorization code Code, and the developer application obtains the Token through the Code.<\/td><td>Web applications accessing the TiDB Cloud API<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n<\/div>\n\n\n\n<p>Today, we&#8217;ll walk through the <strong>Device Code flow<\/strong>. In a subsequent post, we will cover the Authorization Code flow in more detail.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"TiDB_Cloud_OAuth_Example_using_Device_Code_TiDB_Cloud_CLI\"><\/span>TiDB Cloud OAuth Example using Device Code: TiDB Cloud CLI<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Tired of juggling API keys? The latest TiDB Cloud CLI lets you ditch them with built-in OAuth. Simply authenticate once, and you&#8217;ll have secure access to manage your database clusters and DBaaS features directly from the command line. This integration allows you to interact with your TiDB Cloud resources conveniently, securely, and efficiently.<\/p>\n\n\n\n<p><strong>Using TiDB Cloud CLI with OAuth: Step-by-Step Instructions<\/strong><\/p>\n\n\n\n<p><strong>1. Install TiDB Cloud CLI<\/strong>: Download and install the latest version of the TiDB Cloud CLI from the <a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/get-started-with-cli\">TiDB Cloud website<\/a>.<\/p>\n\n\n\n<p><strong>2.Enable OAuth authentication<\/strong>: Run the CLI command to start the OAuth device code flow. The CLI will display a user code and a URL.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1820\" height=\"82\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command.png\" alt=\"CLI Command\" class=\"wp-image-17296\" style=\"width:840px;height:auto\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command.png 1820w, https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command-300x14.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command-1024x46.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command-768x35.png 768w, https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command-1536x69.png 1536w, https:\/\/static.pingcap.com\/files\/2024\/05\/28190511\/CLI-Command-1440x65.png 1440w\" sizes=\"auto, (max-width: 1820px) 100vw, 1820px\" \/><\/figure>\n\n\n\n<p>Enter <code>ticloud auth login<\/code> in the CLI to send an HTTP POST request to the OAuth authorization server, returning a user_code and verification_uri.<\/p>\n\n\n\n<p><strong>3.Authorize the CLI<\/strong>:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1767\" height=\"393\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2.png\" alt=\"Authorize the CLI\" class=\"wp-image-17299\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2.png 1767w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2-300x67.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2-1024x228.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2-768x171.png 768w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2-1536x342.png 1536w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191641\/image-2-1440x320.png 1440w\" sizes=\"auto, (max-width: 1767px) 100vw, 1767px\" \/><\/figure>\n\n\n\n<p>After receiving the user_code and verification_uri, the TiDB Cloud CLI will launch a browser for authentication and authorization.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>If the user is not logged in, they must first authenticate:<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"868\" height=\"957\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28195142\/Sign-In-1-1.png\" alt=\"Sign In\" class=\"wp-image-17311\" style=\"width:351px;height:auto\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28195142\/Sign-In-1-1.png 868w, https:\/\/static.pingcap.com\/files\/2024\/05\/28195142\/Sign-In-1-1-272x300.png 272w, https:\/\/static.pingcap.com\/files\/2024\/05\/28195142\/Sign-In-1-1-768x847.png 768w\" sizes=\"auto, (max-width: 868px) 100vw, 868px\" \/><\/figure>\n<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li>After user login and identity confirmation, an authorization code is displayed:<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1338\" height=\"613\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28191805\/Device-confirmation.png\" alt=\"Device Confirmation\" class=\"wp-image-17301\" style=\"width:448px;height:auto\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28191805\/Device-confirmation.png 1338w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191805\/Device-confirmation-300x137.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191805\/Device-confirmation-1024x469.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191805\/Device-confirmation-768x352.png 768w\" sizes=\"auto, (max-width: 1338px) 100vw, 1338px\" \/><\/figure>\n<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li>The user then selects the scope of authorization:<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1257\" height=\"515\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28195500\/Scope-of-authorization-1.png\" alt=\"Confirm your authorization\" class=\"wp-image-17312\" style=\"width:445px;height:auto\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28195500\/Scope-of-authorization-1.png 1257w, https:\/\/static.pingcap.com\/files\/2024\/05\/28195500\/Scope-of-authorization-1-300x123.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28195500\/Scope-of-authorization-1-1024x420.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28195500\/Scope-of-authorization-1-768x315.png 768w\" sizes=\"auto, (max-width: 1257px) 100vw, 1257px\" \/><\/figure>\n<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li>Next, the user confirms the authorization to complete the process:<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"868\" height=\"620\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28191928\/confirm.png\" alt=\"Confirm\" class=\"wp-image-17303\" style=\"width:345px;height:auto\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28191928\/confirm.png 868w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191928\/confirm-300x214.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28191928\/confirm-768x549.png 768w\" sizes=\"auto, (max-width: 868px) 100vw, 868px\" \/><\/figure>\n<\/div>\n\n\n<ul class=\"wp-block-list\">\n<li>Finally, the TiDB Cloud CLI confirms that the login has been successfully completed.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"2004\" height=\"389\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3.png\" alt=\"Successfully logged in\" class=\"wp-image-17305\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3.png 2004w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3-300x58.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3-1024x199.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3-768x149.png 768w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3-1536x298.png 1536w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192123\/image-3-1440x280.png 1440w\" sizes=\"auto, (max-width: 2004px) 100vw, 2004px\" \/><\/figure>\n\n\n\n<p><strong>4.Enjoy secure access to TiDB Cloud<\/strong>: Once authorized, the CLI will receive an access token, allowing you to manage your database clusters and utilize TiDB Cloud&#8217;s DBaaS capabilities directly from the command line.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Advanced_Applications_of_OAuth_20_in_TiDB_Cloud\"><\/span>Advanced Applications of OAuth 2.0 in TiDB Cloud<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>We&#8217;ve covered the basics of getting started with TiDB CLI and OAuth. Now, let&#8217;s look at some more advanced use cases to unlock the full potential of this powerful combination.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Obtaining an Access Token<\/h3>\n\n\n\n<p>TiDB Cloud CLI polls the OAuth authorization server to confirm that the user has completed authorization and to obtain an Access Token.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The server&#8217;s response will include both an Access Token and a Refresh Token.<\/li>\n\n\n\n<li>The Access Token has a limited lifespan. If the application needs long-term access to an API, it can use the Refresh Token to obtain a new Access Token.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Access TiDB Cloud Services<\/h3>\n\n\n\n<p>After obtaining the access token for TiDB Cloud CLI, you can add it to the request header to call the TiDB Cloud API, such as the List Project or List Cluster API.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/api-overview\">TiDB Cloud API documentation<\/a> (currently supports only version v1beta1)<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.pingcap.com\/tidbcloud\/cli-reference\">TiDB Cloud CLI supported commands<\/a><\/li>\n<\/ul>\n\n\n\n<p><strong>Call the List Project API: <\/strong><\/p>\n\n\n\n<p>Enter the <code>ticloud project list<\/code> command in the TiDB Cloud CLI, and the CLI will call the List Project API. The request example is as follows:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GET \/v1beta1\/projects?page=1&amp;page_size=10 HTTP\/1.1\nHost: iam.tidbapi.com\n<strong>Authorization: Bearer <\/strong>access_token<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1982\" height=\"778\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example.png\" alt=\"request-example\" class=\"wp-image-17304\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example.png 1982w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example-300x118.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example-1024x402.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example-768x301.png 768w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example-1536x603.png 1536w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192045\/request-example-1440x565.png 1440w\" sizes=\"auto, (max-width: 1982px) 100vw, 1982px\" \/><\/figure>\n\n\n\n<p><strong>Call the List Cluster API:<\/strong><\/p>\n\n\n\n<p>Enter the <code>ticloud serverless list<\/code> command in TiDB Cloud CLI, and the CLI will call the List Cluster API. The request example is as follows:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GET \/v1beta1\/clusters?page=1&amp;page_size=10 HTTP\/1.1\nHost: serverless.tidbapi.com\n<strong>Authorization: Bearer <\/strong>access_token<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1950\" height=\"394\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API.png\" alt=\"Call-list-API\" class=\"wp-image-17306\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API.png 1950w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API-300x61.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API-1024x207.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API-768x155.png 768w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API-1536x310.png 1536w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192301\/Call-list-API-1440x291.png 1440w\" sizes=\"auto, (max-width: 1950px) 100vw, 1950px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Revoking OAuth Authorization<\/h3>\n\n\n\n<p>If a user needs to revoke the application&#8217;s access permissions, they can do so by calling the revocation interface. In the TiDB Cloud CLI scenario, when a user executes the logout command, the revocation interface is called to invalidate the user&#8217;s authorization, Access Token, and Refresh Token.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1929\" height=\"125\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke.png\" alt=\"Revoking OAuth Authorization\" class=\"wp-image-17307\" srcset=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke.png 1929w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke-300x19.png 300w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke-1024x66.png 1024w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke-768x50.png 768w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke-1536x100.png 1536w, https:\/\/static.pingcap.com\/files\/2024\/05\/28192526\/Revoke-1440x93.png 1440w\" sizes=\"auto, (max-width: 1929px) 100vw, 1929px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>OAuth integration isn&#8217;t just a convenience; it&#8217;s a game-changer for TiDB Cloud security and efficiency. With OAuth integration, you can streamline workflows, enforce granular access controls, and safeguard your data \u2013 all with the power of modern authentication.<\/p>\n\n\n\n<p>You can start integrating OAuth with TiDB Cloud today to unlock a smoother, more secure cloud database experience.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Next_steps\"><\/span>Next steps<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Start using TiDB Cloud for free at <a href=\"https:\/\/tidbcloud.com\/free-trial\/\">tidbcloud.com<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>TiDB Cloud is a powerful MySQL-compatible database-as-a-service (DBaaS) for diverse industries, trusted by many leading companies such as Catalyst and CAPCOM. Today, we&#8217;re thrilled to announce a major update: TiDB Cloud now supports OAuth 2.0! OAuth 2.0 is a secure authorization protocol that lets you leverage existing login credentials from platforms like Google, Microsoft, and [&hellip;]<\/p>\n","protected":false},"author":259,"featured_media":17323,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ub_ctt_via":"","footnotes":""},"categories":[13],"tags":[253,31,29],"class_list":["post-17290","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-product","tag-security","tag-tidb-cloud","tag-tutorial"],"acf":[],"featured_image_src":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg","author_info":{"display_name":"Roger Zhou","author_link":"https:\/\/www.pingcap.com\/ko\/blog\/author\/roger-zhou\/"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>TiDB Cloud Now Supports OAuth 2.0<\/title>\n<meta name=\"description\" content=\"Dive into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. Explore the benefits and how to get it set up.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pingcap.com\/ko\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"TiDB Cloud Now Supports OAuth 2.0\" \/>\n<meta property=\"og:description\" content=\"Dive into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. Explore the benefits and how to get it set up.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pingcap.com\/ko\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\" \/>\n<meta property=\"og:site_name\" content=\"TiDB\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/pingcap2015\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-29T06:39:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-28T09:55:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233845\/TiDB-Cloud-support-Oauth-2-social.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1875\" \/>\n\t<meta property=\"og:image:height\" content=\"937\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Roger Zhou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233845\/TiDB-Cloud-support-Oauth-2-social.jpeg\" \/>\n<meta name=\"twitter:creator\" content=\"@PingCAP\" \/>\n<meta name=\"twitter:site\" content=\"@PingCAP\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Roger Zhou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\"},\"author\":{\"name\":\"Roger Zhou\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976\"},\"headline\":\"TiDB Cloud Now Supports OAuth 2.0 for a More Secure Login Experience\",\"datePublished\":\"2024-05-29T06:39:34+00:00\",\"dateModified\":\"2024-08-28T09:55:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\"},\"wordCount\":950,\"publisher\":{\"@id\":\"https:\/\/www.pingcap.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg\",\"keywords\":[\"Security\",\"TiDB Cloud\",\"Tutorial\"],\"articleSection\":[\"Product\"],\"inLanguage\":\"ko-KR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\",\"url\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\",\"name\":\"TiDB Cloud Now Supports OAuth 2.0\",\"isPartOf\":{\"@id\":\"https:\/\/www.pingcap.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg\",\"datePublished\":\"2024-05-29T06:39:34+00:00\",\"dateModified\":\"2024-08-28T09:55:09+00:00\",\"description\":\"Dive into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. Explore the benefits and how to get it set up.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage\",\"url\":\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg\",\"contentUrl\":\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg\",\"width\":1875,\"height\":625,\"caption\":\"TiDB-Cloud-support-Oauth-2\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.pingcap.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"TiDB Cloud Now Supports OAuth 2.0 for a More Secure Login Experience\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.pingcap.com\/#website\",\"url\":\"https:\/\/www.pingcap.com\/\",\"name\":\"TiDB\",\"description\":\"TiDB | SQL at Scale\",\"publisher\":{\"@id\":\"https:\/\/www.pingcap.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.pingcap.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.pingcap.com\/#organization\",\"name\":\"PingCAP\",\"url\":\"https:\/\/www.pingcap.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png\",\"contentUrl\":\"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png\",\"width\":811,\"height\":232,\"caption\":\"PingCAP\"},\"image\":{\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/facebook.com\/pingcap2015\",\"https:\/\/x.com\/PingCAP\",\"https:\/\/linkedin.com\/company\/pingcap\",\"https:\/\/youtube.com\/channel\/UCuq4puT32DzHKT5rU1IZpIA\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976\",\"name\":\"Roger Zhou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\/\/www.pingcap.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg\",\"contentUrl\":\"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg\",\"caption\":\"Roger Zhou\"},\"description\":\"TiDB Cloud Product Manager\",\"url\":\"https:\/\/www.pingcap.com\/ko\/blog\/author\/roger-zhou\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"TiDB Cloud Now Supports OAuth 2.0","description":"Dive into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. Explore the benefits and how to get it set up.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pingcap.com\/ko\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/","og_locale":"ko_KR","og_type":"article","og_title":"TiDB Cloud Now Supports OAuth 2.0","og_description":"Dive into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. Explore the benefits and how to get it set up.","og_url":"https:\/\/www.pingcap.com\/ko\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/","og_site_name":"TiDB","article_publisher":"https:\/\/facebook.com\/pingcap2015","article_published_time":"2024-05-29T06:39:34+00:00","article_modified_time":"2024-08-28T09:55:09+00:00","og_image":[{"width":1875,"height":937,"url":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233845\/TiDB-Cloud-support-Oauth-2-social.jpeg","type":"image\/jpeg"}],"author":"Roger Zhou","twitter_card":"summary_large_image","twitter_image":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233845\/TiDB-Cloud-support-Oauth-2-social.jpeg","twitter_creator":"@PingCAP","twitter_site":"@PingCAP","twitter_misc":{"Written by":"Roger Zhou","Est. reading time":"5\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#article","isPartOf":{"@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/"},"author":{"name":"Roger Zhou","@id":"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976"},"headline":"TiDB Cloud Now Supports OAuth 2.0 for a More Secure Login Experience","datePublished":"2024-05-29T06:39:34+00:00","dateModified":"2024-08-28T09:55:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/"},"wordCount":950,"publisher":{"@id":"https:\/\/www.pingcap.com\/#organization"},"image":{"@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage"},"thumbnailUrl":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg","keywords":["Security","TiDB Cloud","Tutorial"],"articleSection":["Product"],"inLanguage":"ko-KR"},{"@type":"WebPage","@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/","url":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/","name":"TiDB Cloud Now Supports OAuth 2.0","isPartOf":{"@id":"https:\/\/www.pingcap.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage"},"image":{"@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage"},"thumbnailUrl":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg","datePublished":"2024-05-29T06:39:34+00:00","dateModified":"2024-08-28T09:55:09+00:00","description":"Dive into how OAuth 2.0 makes signing into your TiDB Cloud databases a breeze for your users. Explore the benefits and how to get it set up.","breadcrumb":{"@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/"]}]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#primaryimage","url":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg","contentUrl":"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg","width":1875,"height":625,"caption":"TiDB-Cloud-support-Oauth-2"},{"@type":"BreadcrumbList","@id":"https:\/\/www.pingcap.com\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pingcap.com\/"},{"@type":"ListItem","position":2,"name":"TiDB Cloud Now Supports OAuth 2.0 for a More Secure Login Experience"}]},{"@type":"WebSite","@id":"https:\/\/www.pingcap.com\/#website","url":"https:\/\/www.pingcap.com\/","name":"\ud2f0DB","description":"TiDB | SQL at Scale","publisher":{"@id":"https:\/\/www.pingcap.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pingcap.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/www.pingcap.com\/#organization","name":"PingCAP","url":"https:\/\/www.pingcap.com\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/","url":"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png","contentUrl":"https:\/\/static.pingcap.com\/files\/2021\/11\/pingcap-logo.png","width":811,"height":232,"caption":"PingCAP"},"image":{"@id":"https:\/\/www.pingcap.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/pingcap2015","https:\/\/x.com\/PingCAP","https:\/\/linkedin.com\/company\/pingcap","https:\/\/youtube.com\/channel\/UCuq4puT32DzHKT5rU1IZpIA"]},{"@type":"Person","@id":"https:\/\/www.pingcap.com\/#\/schema\/person\/6b5685219d8e02127ea91e95a7549976","name":"Roger Zhou","image":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.pingcap.com\/#\/schema\/person\/image\/","url":"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg","contentUrl":"https:\/\/static.pingcap.com\/files\/2023\/12\/21183525\/Roger-Zhou-150x150.jpeg","caption":"Roger Zhou"},"description":"TiDB Cloud Product Manager","url":"https:\/\/www.pingcap.com\/ko\/blog\/author\/roger-zhou\/"}]}},"grav_blocks":false,"card_markup":"<a class=\"card-resource bg-white\" href=\"https:\/\/www.pingcap.com\/ko\/blog\/tidb-cloud-supports-oauth-2-0-for-a-more-secure-login-experience\/\"><div class=\"card-resource__image-container\"><img class=\"card-resource__image\" alt=\"TiDB-Cloud-support-Oauth-2\" src=\"https:\/\/static.pingcap.com\/files\/2024\/05\/28233815\/TiDB-Cloud-support-Oauth-2.jpeg\" loading=\"lazy\" width=1875 height=625 \/><\/div><div class=\"card-resource__content-container\"><div class=\"card-resource__content-head\"><div class=\"card-resource__category\">Product<\/div><\/div><h5 class=\"card-resource__title\">TiDB Cloud Now Supports OAuth 2.0 for a More Secure Login Experience<\/h5><\/div><\/a>","_links":{"self":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts\/17290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/comments?post=17290"}],"version-history":[{"count":12,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts\/17290\/revisions"}],"predecessor-version":[{"id":19194,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/posts\/17290\/revisions\/19194"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/media\/17323"}],"wp:attachment":[{"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/media?parent=17290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/categories?post=17290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pingcap.com\/ko\/wp-json\/wp\/v2\/tags?post=17290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}